kolaente 37a174b99e feat(api/v2): add public auth routes (register, password, confirm, link-share) ... Port the unauthenticated local-account flows and link-share auth to /api/v2, delegating to the shared business logic: - POST /register (404 when registration is disabled) - POST /user/password/token, POST /user/password/reset - POST /user/confirm - POST /shares/{share}/auth Local-account routes register only when local auth is enabled and the link-share route only when link sharing is enabled, mirroring v1. Each operation opts out of global auth and its path is added to unauthenticatedAPIPaths.		2026-06-12 07:58:17 +00:00
..
caldav	fix(caldav): escape user-controlled strings per RFC 5545 in VCALENDAR output	2026-04-09 15:44:04 +00:00
caldavtests	fix(caldav): skip tests for known CalDAV bugs and fix timing issues	2026-04-02 11:34:55 +00:00
cmd	fix(cli): guard last admin on scheduled CLI deletion path	2026-04-20 18:55:06 +00:00
config	feat: always enable bot users	2026-05-04 10:38:53 +00:00
cron	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
db	feat(api/v2): add user webhooks on /api/v2	2026-06-10 19:12:41 +00:00
doctor	feat(auth): enforce OpenID Connect issuer uniqueness across providers	2026-03-30 22:41:50 +00:00
e2etests	test(webhook): assert bad webhook is retried in no-duplicate test	2026-04-09 09:26:04 +00:00
events	feat: add InitEventsForTesting and Unfake for real event dispatch in tests	2026-03-05 12:49:27 +01:00
files	docs(api/v2): tag task attachment fields for the v2 schema	2026-06-10 10:22:39 +00:00
health	feat: introduce shared health check logic (#1073)	2025-07-02 21:01:41 +00:00
i18n	chore(i18n): update translations via Crowdin	2026-05-27 02:31:52 +00:00
initialize	refactor(user): remove the now-empty listeners file	2026-05-30 13:48:01 +00:00
license	fix(license): degrade to free when servers unreachable or key rejected	2026-04-20 18:55:06 +00:00
log	fix(mail): guard log calls in GetMailDomain and fix hostname-dependent tests	2026-04-03 18:30:39 +00:00
mail	feat: add Atom feed for user notifications with API token auth (#2758)	2026-05-15 17:25:09 +02:00
metrics	refactor(metrics): count entities on demand with a TTL cache	2026-05-30 13:48:01 +00:00
migration	feat(time-tracking): add the time_entries table migration	2026-06-08 13:54:09 +00:00
models	refactor(user): share user-search logic between v1 and v2	2026-06-11 20:07:43 +00:00
modules	refactor(auth): extract shared auth/token business logic for v2 reuse	2026-06-12 07:58:17 +00:00
notifications	fix(notifications): strip remote images from notification emails	2026-06-11 06:53:37 +00:00
plugins	test(plugins): add yaegi plugin integration tests	2026-03-30 20:44:46 +00:00
red	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
routes	feat(api/v2): add public auth routes (register, password, confirm, link-share)	2026-06-12 07:58:17 +00:00
swagger	[skip ci] Updated swagger docs	2026-06-11 20:50:04 +00:00
user	refactor(user): share user-search logic between v1 and v2	2026-06-11 20:07:43 +00:00
utils	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
version	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
web	refactor(task-attachment): share upload+download via pkg/web/files for v1+v2	2026-06-10 10:22:39 +00:00
websocket	feat(time-tracking): let clients subscribe to timer events	2026-06-08 13:54:09 +00:00
webtests	test(api/v2): split the B1 webtests into per-route files	2026-06-11 20:07:43 +00:00
yaegi_symbols	refactor(user): remove the now-empty listeners file	2026-05-30 13:48:01 +00:00