6 Commits

Include renames

Author	SHA1	Message	Date
Andras BacsaiandClaude Opus 5.5	a70e856882	test: remove tests that do not test behavior and strengthen weak ones ... - Remove tests that only check markup, CSS, static text, wire:key strings, framework behavior, copied app logic, or expect(true) - Replace source-grep and Reflection checks of security fixes with tests that run the real code (shell quoting, locked properties, 403 checks, webhook fork trust, log redaction, Sentinel token cleanup) - Assert response bodies and unchanged data on API error paths - Run the Traefik version job through handle() instead of private methods - Update stale tests for scheduled task props, the default Postgres image, and the disabled transfer link of unvalidated servers Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-09 08:47:56 +01:00
Andras Bacsai	de1d234ea5	fix(auth): require confirmation before accepting magic links (#11413)	2026-08-20 09:34:05 +02:00
Andras Bacsai	c0866d4cb3	fix(auth): preserve invite login with database sessions	2026-07-03 09:38:05 +02:00
Andras Bacsai	4f509c02be	fix(auth): validate invitation magic link tokens ... Accept invitation links across configured public origins while still rejecting stored invitations whose token no longer matches.	2026-06-12 16:17:45 +02:00
Andras Bacsai	cd06e10b1b	fix(auth): bind magic links to their invitation ... Include the invitation UUID in generated magic link tokens and validate the matching stored invitation link before logging the user in, preventing stale or same-email invitations from being reused.	2026-06-02 12:57:30 +02:00
Andras Bacsai	40d570f195	chore: update team invitation handling	2026-06-02 12:22:27 +02:00