LukeGus a2f6c90eae feat(auth): non-destructive password resets and admin reset endpoint ...

Password resets no longer destroy user data: the DEK is system-wrapped, so
forgot-password and admin resets are just a hash update plus session revoke.
The wipe branch survives only for accounts that never logged in since the
encryption upgrade and now requires explicit confirmDataWipe (surfaced as a
409 DATA_WIPE_REQUIRED; the reset UI asks for confirmation). Adds
POST /users/admin/reset-password and removes the dead re-encryption paths.

2026-07-16 00:36:14 -05:00

..

crypto-migration

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

alert-trigger.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

audit-logger.test.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

audit-logger.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

auth-manager-oidc-logout.test.ts

refactor(crypto): make system-wrapped DEKs the authoritative key path

2026-07-16 00:19:12 -05:00

auth-manager-token.test.ts

refactor(crypto): make system-wrapped DEKs the authoritative key path

2026-07-16 00:19:12 -05:00

auth-manager.ts

feat(auth): non-destructive password resets and admin reset endpoint

2026-07-16 00:36:14 -05:00

auto-ssl-setup.ts

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

cors-config.ts

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

data-crypto.ts

feat(auth): non-destructive password resets and admin reset endpoint

2026-07-16 00:36:14 -05:00

database-file-encryption.test.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

database-file-encryption.ts

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

database-layer-preupgrade-backup.test.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

database-layer-preupgrade-backup.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

database-migration.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

database-save-trigger.test.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

database-save-trigger.ts

v1.11.2 (#613)

2026-03-08 18:02:14 -05:00

field-crypto.test.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

field-crypto.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

guacd-config.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

lazy-field-encryption.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

legacy-sqlite-database-copy-store.test.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

legacy-sqlite-database-copy-store.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

logger.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

login-rate-limiter.test.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

login-rate-limiter.ts

v1.11.0 (#523)

2026-01-24 19:49:42 -06:00

notification-sender.ts

Merge commit from fork

2026-07-15 14:55:27 +08:00

oidc-desktop-callback.test.ts

Fix Firefox desktop OIDC callback (#1044)

2026-07-13 23:00:22 +08:00

oidc-desktop-callback.ts

Fix Firefox desktop OIDC callback (#1044)

2026-07-13 23:00:22 +08:00

opkssh-binary-manager.ts

v2.1.0 (#711)

2026-04-22 16:55:23 -05:00

permission-manager.test.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

permission-manager.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

proxy-agent.ts

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

proxy-helper.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

request-origin.test.ts

Fix OIDC redirect forwarded port handling (#1007)

2026-07-10 08:03:59 +08:00

request-origin.ts

Fix OIDC redirect forwarded port handling (#1007)

2026-07-10 08:03:59 +08:00

safe-outbound-fetch.ts

Merge commit from fork

2026-07-15 14:55:27 +08:00

shared-credential-manager.test.ts

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

shared-credential-manager.ts

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

simple-db-ops.ts

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

socks5-helper.ts

v1.11.2 (#613)

2026-03-08 18:02:14 -05:00

ssh-algorithms.ts

release-2.4.1 (#921)

2026-06-21 15:55:41 -05:00

ssh-key-utils.test.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

ssh-key-utils.ts

release-2.5.0 (#994)

2026-06-29 13:28:26 -05:00

system-crypto.ts

refactor(crypto): remove pending share queue and credential sharing key

2026-07-16 00:29:54 -05:00

user-agent-parser.test.ts

v2.3.2 (#874)

2026-06-04 14:16:53 -05:00

user-agent-parser.ts

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

user-data-export.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

user-encryption-migration-store.test.ts

draft: database layer refactor (#1054)

2026-07-15 23:28:10 -05:00

user-encryption-migration-store.ts

refactor(db): collapse repository rollout scaffolding into single factory

2026-07-15 23:56:02 -05:00

user-keys.test.ts

feat(crypto): add UserKeyManager with system-wrapped per-user DEKs

2026-07-16 00:07:21 -05:00

user-keys.ts

feat(crypto): add UserKeyManager with system-wrapped per-user DEKs

2026-07-16 00:07:21 -05:00

wake-on-lan.test.ts

release-2.4.1 (#921)

2026-06-21 15:55:41 -05:00

wake-on-lan.ts

release-2.4.1 (#921)

2026-06-21 15:55:41 -05:00