dak.c2s/backend/app
CCS Admin d5db84d93f feat: add self-service password reset via email
Adds "Passwort vergessen?" to login page with email-based password
reset flow. Backend generates secure token (SHA-256 hashed, 1h expiry),
sends reset link via SMTP, and validates on submission. Includes rate
limiting (3 requests/hour/email), audit logging, and account unlock
on successful reset. New ResetPasswordPage with password confirmation.

New DB table: password_reset_tokens (migration 008).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-28 14:56:07 +00:00
..
api feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
core feat: JWT auth, bcrypt, MFA, dependency injection, security tests 2026-02-24 07:41:35 +00:00
models feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
schemas feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
services fix: use same KW range for year-over-year KPI comparison 2026-02-28 13:23:03 +00:00
utils feat: utility functions — fallgruppe mapping, KW calc, ICD/KVNR validation 2026-02-24 07:41:09 +00:00
__init__.py feat: project scaffolding with FastAPI, config, database connection 2026-02-24 07:24:00 +00:00
config.py feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
database.py feat: project scaffolding with FastAPI, config, database connection 2026-02-24 07:24:00 +00:00
main.py feat: add avatar upload/delete endpoints with static file serving 2026-02-26 09:39:21 +00:00