Commit Graph
3 Commits
Author SHA1 Message Date
Thanakorn 73c680e844 Harden sign-in and password reset
- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures
2026-09-24 14:53:40 +07:00
Thanakorn S f6dc9a3278 modify classed and comments 2026-04-29 14:21:09 +07:00
Thanakorn S d8c55d278a app settings 2026-04-27 10:50:31 +07:00