kolaente 5395bd37f3 feat(api/v2): add login and logout on /api/v2 ... Port the cookie-setting login and logout endpoints to Huma. Both reuse the shared auth cores; the HttpOnly refresh cookie and Cache-Control: no-store header are set via the unwrapped echo context (the cookie stays out of the OpenAPI schema, matching v1). The token response inlines the JWT to avoid a schema-name collision with user.Token. login is public (LDAP-only deployments log in here too); logout inherits the global JWT auth and no-ops for tokens that carry no session.		2026-06-17 14:55:07 +02:00
..
audit	refactor(events): use a concrete doer on project and team events	2026-06-12 08:56:08 +00:00
caldav	fix(caldav): escape user-controlled strings per RFC 5545 in VCALENDAR output	2026-04-09 15:44:04 +00:00
caldavtests	fix(caldav): skip tests for known CalDAV bugs and fix timing issues	2026-04-02 11:34:55 +00:00
cmd	fix(cli): guard last admin on scheduled CLI deletion path	2026-04-20 18:55:06 +00:00
config	feat(config): add audit logging config keys	2026-06-12 08:56:08 +00:00
cron	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
db	fix(db): interpolate table identifiers in truncate instead of binding them	2026-06-17 12:13:50 +00:00
doctor	feat(auth): enforce OpenID Connect issuer uniqueness across providers	2026-03-30 22:41:50 +00:00
e2etests	test(webhook): assert bad webhook is retried in no-duplicate test	2026-04-09 09:26:04 +00:00
events	refactor(events): pass context to DispatchPending directly	2026-06-12 08:56:08 +00:00
files	docs(api/v2): tag task attachment fields for the v2 schema	2026-06-10 10:22:39 +00:00
health	feat: introduce shared health check logic (#1073)	2025-07-02 21:01:41 +00:00
i18n	chore(i18n): update translations via Crowdin	2026-05-27 02:31:52 +00:00
initialize	feat(audit): wire request-meta middleware and writer initialization	2026-06-12 08:56:08 +00:00
license	fix(license): degrade to free when servers unreachable or key rejected	2026-04-20 18:55:06 +00:00
log	fix(mail): guard log calls in GetMailDomain and fix hostname-dependent tests	2026-04-03 18:30:39 +00:00
mail	feat: add Atom feed for user notifications with API token auth (#2758)	2026-05-15 17:25:09 +02:00
metrics	refactor(metrics): count entities on demand with a TTL cache	2026-05-30 13:48:01 +00:00
migration	feat(time-tracking): add the time_entries table migration	2026-06-08 13:54:09 +00:00
models	refactor(background): extract download + unsplash-proxy logic for reuse	2026-06-17 11:31:50 +00:00
modules	refactor(auth): extract transport-agnostic login, logout and OIDC cores	2026-06-17 14:54:45 +02:00
notifications	fix(notifications): strip remote images from notification emails	2026-06-11 06:53:37 +00:00
plugins	test(plugins): add yaegi plugin integration tests	2026-03-30 20:44:46 +00:00
red	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
routes	feat(api/v2): add login and logout on /api/v2	2026-06-17 14:55:07 +02:00
swagger	[skip ci] Updated swagger docs	2026-06-11 20:50:04 +00:00
user	feat(audit): attribute failed logins to the originating request	2026-06-12 08:56:08 +00:00
utils	fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients	2026-04-09 07:31:08 +00:00
version	fix: correct license header references (#882)	2025-06-10 12:18:38 +02:00
web	refactor(background): extract download + unsplash-proxy logic for reuse	2026-06-17 11:31:50 +00:00
websocket	feat(time-tracking): let clients subscribe to timer events	2026-06-08 13:54:09 +00:00
webtests	test(api/v2): use cross-engine datetime literals in testing webtest	2026-06-17 12:13:50 +00:00
yaegi_symbols	refactor(user): remove the now-empty listeners file	2026-05-30 13:48:01 +00:00