No description
Find a file
rene 526ff42215 Security: Passwort-Minimum, Rate Limits, Headers, Passwort-vergessen, email_verified
- Passwort-Minimum 8 Zeichen bei Register + Reset
- Rate Limit auf /resend-verification (3/h) und /forgot-password (3/h)
- Security-Headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy etc.
- email_verified in get_current_user SELECT ergänzt
- Forum: create_thread + create_post erfordern email_verified
- POST /auth/forgot-password + /auth/reset-password (2h-Token, via support@)
- DB-Migration: password_reset_token + password_reset_expires
- Frontend: Passwort-vergessen-Modal im Login, Reset-Formular mit Passphrase-Generator
- SW by-v576, APP_VER 553
2026-04-30 20:23:43 +02:00
backend Security: Passwort-Minimum, Rate Limits, Headers, Passwort-vergessen, email_verified 2026-04-30 20:23:43 +02:00
diary Sprint 15: Suche, Ausweis, Teilen, Widget 2026-04-17 15:51:09 +02:00
promotion Dateien nach „promotion“ hochladen 2026-04-28 08:32:31 +02:00
scripts SSH-Port DS: 22 → 4711 2026-04-24 07:39:47 +02:00
.env.example ki: Port 11435, Modell gemma-4-31b-it (LM Studio 0.4.x) 2026-04-24 18:15:32 +02:00
.gitignore Fix: .claude/worktrees in .gitignore aufnehmen 2026-04-17 09:33:27 +02:00
docker-compose.staging.yml Feature: Staging-Workflow — develop-Branch, make staging/release, APP_VERSION 1.0.0, Staging-Banner — SW by-v513 2026-04-29 19:57:33 +02:00
docker-compose.yml Security: SMTP_SUPPORT Credentials aus docker-compose.yml entfernt — gehören in .env 2026-04-30 20:18:53 +02:00
Dockerfile Fix: uvicorn --forwarded-allow-ips=* — echte Client-IP hinter NPM-Proxy sichtbar 2026-04-29 21:40:49 +02:00
Makefile Fix: APP_VERSION 1.1.1 in app.js + Makefile aktualisiert APP_VERSION bei release, SW by-v546 2026-04-30 11:32:41 +02:00
PROJEKT.md Doku: Sprint 16 komplett — Phone-Frame, Screenshots, UX-Fixes 2026-04-27 19:44:26 +02:00