ZacharyZcR e610aba0e5 fix: enforce unique usernames (#1628) ...

* fix: enforce unique usernames

Registration checked for a taken name, hashed the password, then
inserted, with nothing in the schema enforcing uniqueness. Concurrent
sign-ups could create two accounts with one name, after which login,
password reset, proxy login and admin lookups by username picked
between them arbitrarily.

Add a unique index on users.username for every dialect. Existing
duplicates are renamed (later rows get a -<id> suffix, the oldest keeps
the name) rather than deleted. Registration and admin user creation now
return the same 409 when the insert loses the race.

* fix: avoid username collisions during migration

2026-10-14 08:17:47 +08:00

..

meta

fix: enforce unique usernames (#1628)

2026-10-14 08:17:47 +08:00

0000_clean_pretty_boy.sql

release-2.6.1 (#1161)

2026-08-06 14:41:39 -05:00

0001_puzzling_aqueduct.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0002_bumpy_korg.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0003_dry_human_robot.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0004_fancy_spencer_smythe.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0005_tearful_mindworm.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0006_last_fantastic_four.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0007_aspiring_turbo.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0008_lame_nighthawk.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0009_tan_skaar.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0010_small_infant_terrible.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0011_easy_the_order.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0012_outgoing_ultron.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0013_third_wraith.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0014_bitter_nextwave.sql

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

0015_red_cobalt_man.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0016_unusual_tyrannus.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0017_spicy_proteus.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0018_fancy_barracuda.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0019_certain_archangel.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0020_wise_green_goblin.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0021_thick_galactus.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0022_secret_blacklash.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0023_even_beast.sql

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

0024_thin_colleen_wing.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0025_wet_master_mold.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0026_empty_black_bird.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0027_watery_multiple_man.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0028_fair_tusk.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0029_open_captain_america.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0030_sweet_warlock.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0031_nebulous_diamondback.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0032_lethal_marrow.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0033_clear_anthem.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0034_green_vector.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0035_clumsy_leech.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0036_dear_vapor.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0037_foamy_norman_osborn.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0038_quiet_karnak.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0039_condemned_shiva.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0040_misty_skin.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0041_wonderful_cargill.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0042_colorful_bill_hollister.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0043_unusual_lucky_pierre.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0044_jittery_thunderball.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0045_flowery_the_hood.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0046_rich_logan.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0047_red_silver_sable.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0048_hard_demogoblin.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0049_quiet_blacklash.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0050_optimal_speedball.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0051_icy_hercules.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0052_illegal_gladiator.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0053_magical_groot.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0054_wakeful_misty_knight.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0055_icy_patch.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0056_supreme_toad_men.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0057_serious_shatterstar.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0058_boring_avengers.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0059_military_purple_man.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0060_mean_gorgon.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0061_plugin_settings_scope_enum.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0062_smooth_speed.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0063_needy_radioactive_man.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0064_flippant_killer_shrike.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0065_ambiguous_agent_zero.sql

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

0066_retire_2_8_columns.sql

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

0067_external_session_ref.sql

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

0068_plugin_pinned_version.sql

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

0069_plugin_channel.sql

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

0070_drop_donation_modal.sql

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

0071_drop_install_count_source.sql

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

0072_unique_username.sql

fix: enforce unique usernames (#1628)

2026-10-14 08:17:47 +08:00