Paul NothaftandPaul Nothaft b798d8e4c1 fix(backend): use the strong password generator for resets and enforce must_change_password (#1387) ...

Admin password reset generated a ~2^21-entropy password from a small
wordlist instead of the already-available generateSecurePassword(16),
and must_change_password was written on reset but never checked by
any route-blocking logic — a reset user could keep using the old
session/password indefinitely.

Co-authored-by: Paul Nothaft <[email protected]>

2026-09-11 10:40:46 +02:00

..

adminAuthRoleFallback.test.js

fix(auth): fail closed when the adminAuth roles join errors (#974)

2026-08-03 14:48:20 +02:00

apiRateLimitGate.test.js

fix(security): close the case-sensitivity bypass in the API rate limiter

2026-09-02 09:43:11 +02:00

apiTokenRoleFallback.test.js

fix(auth): fail closed when the adminAuth roles join errors (#974)

2026-08-03 14:48:20 +02:00

authMustChangePassword.test.js

fix(backend): use the strong password generator for resets and enforce must_change_password (#1387)

2026-09-11 10:40:46 +02:00

authRateLimitGate.test.js

fix(security): rate-limit the password-change endpoints per IP too

2026-09-02 09:43:11 +02:00

galleryAdminPreview.test.js

feat(gallery): admin preview skips the password on protected galleries (#981)

2026-08-04 16:48:07 +02:00

galleryImageRateLimitSkip.test.js

fix(security): stop a gallery viewer's own image fetches spending the anonymous budget

2026-09-06 22:47:37 +02:00

maintenance.spaShell.test.js

feat(docker): all-in-one image (#1042) — my version of #1067 (#1068)

2026-08-18 22:15:49 +02:00

ownership.filterOwnedEventIds.test.js

fix(security): close cross-event thumbnail leak, bulk-op ownership bypass, + hardening

2026-07-03 10:27:28 +02:00

securityHardeningBatch2.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

sessionTimeout.isSessionExpired.test.js

fix(auth): /auth/session must enforce session timeout symmetrically (#350 recurrence)

2026-05-05 00:12:01 +02:00