kolaente 75629158cb test(user): cover TOTP lockout persistence and password-reset unlock ... Verifies that HandleFailedTOTPAuth locks the account after 10 rolled-back caller sessions (the regression from GHSA-fgfv-pv97-6cmj), and that the persisted password reset token can unlock the account via ResetPassword.		2026-04-09 16:08:26 +00:00
..
caldav_token.go	…
db.go	…
delete.go	…
error.go	fix(user): use unique error code for ErrCodeAccountLocked	2026-03-23 12:06:16 +00:00
events.go	…
listeners.go	…
main_test.go	…
notifications.go	…
test.go	…
token.go	…
totp.go	fix(security): persist TOTP lockout across login rollback	2026-04-09 16:08:26 +00:00
totp_test.go	test(user): cover TOTP lockout persistence and password-reset unlock	2026-04-09 16:08:26 +00:00
update_email.go	…
update_email_test.go	…
user.go	fix(auth): reject disabled/locked users in CheckUserCredentials	2026-03-23 16:37:26 +00:00
user_create.go	refactor(user): export IsErrUserStatusError for use across packages	2026-03-23 12:06:16 +00:00
user_email_confirm.go	…
user_email_confirm_test.go	…
user_password_reset.go	…
user_test.go	test(auth): add comprehensive disabled/locked user auth tests	2026-03-23 16:37:26 +00:00
users_project.go	fix: add ORDER BY to ListUsers query for deterministic ordering	2026-03-27 23:05:04 +00:00
validator.go	…