Andras Bacsai 3c23e2d30f refactor(auth): remove OAuth re-authentication for destructive actions ...

Drop the OAuth confirm/callback flow that let users confirm destructive
actions by re-authenticating through a linked provider. This removes the
confirm route and session handling in OauthController, the middleware
bypass for those routes, OauthSetting::providerName(),
User::oauthConfirmationProviders(),
OauthLoginService::identityBelongsToUser() and the
socialite_reauthentication_parameters() helper.

Users with a linked OAuth identity no longer need a password step and
only use the dialog's typed confirmation. Password confirmation is now
required only for users who have a password and no SSO identity. The
confirmation modal and tests are updated to match.

2026-09-30 21:37:02 +02:00

..

DangerDeleteResourceTest.php

refactor(auth): remove OAuth re-authentication for destructive actions

2026-09-30 21:37:02 +02:00

SqliteDatabaseTest.php

test: add Pest browser testing with SQLite :memory: schema

2026-02-11 15:25:47 +01:00