Hartmut 9ef7114c77 security: reject common/weak passwords on every set-password path (#31) ...

Adds a synchronous policy check that blocks (1) the curated >=12-char
common-password list (rockyou top, predictable seasonal, admin defaults),
(2) trivial patterns (single-char repeat, short-pattern repeat, keyboard
or numeric sequences), and (3) passwords containing the user's email
local-part or any name component. Wired into all five password-mutation
sites: first-admin setup, admin createUser/setUserPassword, invite
acceptance, and password-reset.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-18 14:02:43 +02:00

..

scripts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

src

security: reject common/weak passwords on every set-password path (#31)

2026-04-18 14:02:43 +02:00

package.json

security: MFA backup codes — issue on enable, redeem at login, regenerate on demand (#43)

2026-04-17 18:47:18 +02:00

tsconfig.json

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

vitest.config.ts

test(api): lower branches coverage threshold 75→72 (actual 73.22%)

2026-04-12 19:55:57 +02:00