Dilshod Rasulov 8b93161434 feat(auth): self-service password reset (forgot/reset endpoints) ...

Add an email-based "forgot password" flow:
- PasswordResetToken model (stores only a SHA-256 hash, single-use, TTL)
  and migration 27 for the password_reset_tokens table.
- POST /api/auth/forgot-password — generic response (no account
  enumeration), 60s throttle, emails a one-time reset link via the
  existing EmailChannel as a background task.
- GET /api/auth/reset-password/validate — token validity check for the UI.
- POST /api/auth/reset-password — validates the token, enforces the
  password policy, sets the new password, clears lock state, invalidates
  outstanding tokens and terminates all sessions.
- Configurable link lifetime via PASSWORD_RESET_TOKEN_EXPIRE_MINUTES (30m).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-26 03:24:19 +05:00

..

alembic

Refactor backend: Split models and proxmox_client into modules, add alembic

2026-06-13 03:53:27 +05:00

app

feat(auth): self-service password reset (forgot/reset endpoints)

2026-06-26 03:24:19 +05:00

migrations

feat(auth): self-service password reset (forgot/reset endpoints)

2026-06-26 03:24:19 +05:00

tests

fix(metrics): correct cpu/disk% chart scaling, evict stale collector state, lighten nic query, drop polling & dead RRD code

2026-06-21 21:35:02 +05:00

.dockerignore

Add complete project structure and all files

2025-12-15 13:03:29 +05:00

.env.example

fix(security): authenticate VNC/terminal WebSockets and harden SSH/config

2026-06-13 06:31:26 +05:00

alembic.ini

Refactor backend: Split models and proxmox_client into modules, add alembic

2026-06-13 03:53:27 +05:00

Dockerfile

fix(docker): include migrations directory in backend image

2026-06-13 18:52:06 +05:00

init_admin.py

Refactor backend: Split models and proxmox_client into modules, add alembic

2026-06-13 03:53:27 +05:00

init_panel_settings.py

Add complete project structure and all files

2025-12-15 13:03:29 +05:00

pytest.ini

fix(reinstall): use OSTemplate.vmid (not template_vmid) and convert memory bytes->MB

2026-04-29 23:48:48 +02:00

requirements-dev.txt

fix(reinstall): use OSTemplate.vmid (not template_vmid) and convert memory bytes->MB

2026-04-29 23:48:48 +02:00

requirements.txt

Refactor backend: Split models and proxmox_client into modules, add alembic

2026-06-13 03:53:27 +05:00

sign_logo.py

Add complete project structure and all files

2025-12-15 13:03:29 +05:00