curo1305 43e1d0145e feat(02-03): add TOTP setup/enable/disable, password reset, and frontend_url to config ...

- GET /api/auth/totp/setup: returns provisioning_uri + secret (400 if already enabled)
- POST /api/auth/totp/enable: rate-limited 10/min, verifies TOTP code with Redis replay prevention, returns 10 backup codes
- DELETE /api/auth/totp: disables TOTP, clears secret, deletes backup codes
- POST /api/auth/password-reset: always returns 202 (anti-enumeration), enqueues Celery email task
- POST /api/auth/password-reset/confirm: validates token, strength, HIBP; updates password; no auto-login (AUTH-05)
- config.py: added frontend_url setting for password reset link construction
- test_auth_totp.py: all 11 tests passing (GREEN)

2026-05-22 19:52:36 +02:00

.planning

docs(02-02): execution summary — auth API endpoints + frontend auth wall complete

2026-05-22 19:48:33 +02:00

backend

feat(02-03): add TOTP setup/enable/disable, password reset, and frontend_url to config

2026-05-22 19:52:36 +02:00

docker/postgres/initdb.d

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

frontend

feat(02-02): frontend auth store, router guard, Login/Register views

2026-05-22 19:45:21 +02:00

.env.example

feat(02-01): add BackupCode ORM model, password_must_change field, Alembic migration, extend Settings

2026-05-22 19:19:52 +02:00

.gitignore

feat(02-02): frontend auth store, router guard, Login/Register views

2026-05-22 19:45:21 +02:00

CLAUDE.md

docs: create roadmap (5 phases)

2026-05-21 20:53:28 +02:00

docker-compose.yml

feat(01-01): add five-service compose stack and postgres init script

2026-05-22 08:57:14 +02:00

S

Description

No description provided

3 MiB

Languages

Python 65.7%

Vue 22.8%

JavaScript 11.3%