LukeGus a2f6c90eae feat(auth): non-destructive password resets and admin reset endpoint ...

Password resets no longer destroy user data: the DEK is system-wrapped, so
forgot-password and admin resets are just a hash update plus session revoke.
The wipe branch survives only for accounts that never logged in since the
encryption upgrade and now requires explicit confirmDataWipe (surfaced as a
409 DATA_WIPE_REQUIRED; the reset UI asks for confirmation). Adds
POST /users/admin/reset-password and removes the dead re-encryption paths.

2026-07-16 00:36:14 -05:00

..

database

feat(auth): non-destructive password resets and admin reset endpoint

2026-07-16 00:36:14 -05:00

guacamole

refactor(db): route remaining raw DB access through repositories

2026-07-16 00:04:36 -05:00

scripts

v1.11.2 (#613)

2026-03-08 18:02:14 -05:00

serial

refactor(crypto): make system-wrapped DEKs the authoritative key path

2026-07-16 00:19:12 -05:00

ssh

refactor(crypto): make system-wrapped DEKs the authoritative key path

2026-07-16 00:19:12 -05:00

utils

feat(auth): non-destructive password resets and admin reset endpoint

2026-07-16 00:36:14 -05:00

dashboard.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

homepage.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

package.json

v2.3.0

2026-05-28 22:29:20 -05:00

starter.ts

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

swagger.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00