Alexis Loskoutoff e93b771ff5 Check a dummy hash when a login names no account ...

Without a password to check, a login for an unknown account skipped bcrypt
and answered far sooner than one with a wrong password, which still told
which emails have an account.

2026-11-05 18:29:52 +01:00

..

2fa.js

Updated backend packages

2026-08-22 23:10:26 +10:00

access-list.js

Adds integration tests for per path access lists, fixes ipv6 jsv,

2026-09-24 12:21:49 +10:00

audit-log.js

Updated backend packages

2026-08-22 23:10:26 +10:00

certificate.js

Merge pull request #5948 from Waterman1997/patch-1

2026-11-05 10:04:02 +10:00

dead-host.js

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00

host.js

Fix access list rules and SSL missing from re-rendered host configs

2026-10-05 22:13:31 +10:00

ip_ranges.js

Fix #4833 supports the usual proxy env vars for outgoing admin related requests

2025-11-05 15:16:42 +10:00

log-viewer.js

fix: Use forwarding_host instead of the renamed forward_ip column

2026-09-23 07:00:19 -03:00

nginx.js

Fix access list rules and SSL missing from re-rendered host configs

2026-10-05 22:13:31 +10:00

proxy-host.js

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00

redirection-host.js

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00

remote-version.js

Tweaks to showing new version available

2025-11-13 11:20:31 +10:00

report.js

Change visibility to permission_visibility in report.js

2025-12-14 00:35:22 +01:00

setting.js

Convert backend to ESM

2025-10-02 08:10:18 +10:00

stream.js

Fix backend linting

2026-05-13 13:40:06 +10:00

token.js

Check a dummy hash when a login names no account

2026-11-05 18:29:52 +01:00

user.js

feat: rate limit auth endpoints and scope user proxy host permissions

2026-11-05 12:16:36 +05:00