dak.c2s/backend/alembic/versions
CCS Admin d5db84d93f feat: add self-service password reset via email
Adds "Passwort vergessen?" to login page with email-based password
reset flow. Backend generates secure token (SHA-256 hashed, 1h expiry),
sends reset link via SMTP, and validates on submission. Includes rate
limiting (3 requests/hour/email), audit logging, and account unlock
on successful reset. New ResetPasswordPage with password confirmation.

New DB table: password_reset_tokens (migration 008).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-28 14:56:07 +00:00
..
005_add_disclosure_requests.py feat: add DisclosureRequest model and migration 2026-02-26 16:02:52 +00:00
006_anonymize_fall_ids.py fix: correct down_revision in 006 migration to match 005_disclosure 2026-02-26 17:13:22 +00:00
007_add_report_type.py feat: add Onko-Intensiv and Galle-Schild report types 2026-02-27 12:47:59 +00:00
008_password_reset_tokens.py feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
062ccae5457b_initial_schema.py feat: Alembic migrations, initial schema 2026-02-24 07:33:27 +00:00
5717043d0f9d_add_profile_fields_to_users.py feat: add first_name, last_name, display_name, avatar_url to User model 2026-02-26 09:34:33 +00:00