Repository navigation

Accounts: sign-up, sign-in and recovery rebuilt - #34

Closed

codeGlaze wants to merge 746 commits into

f1852203-accounts

Closed

Accounts: sign-up, sign-in and recovery rebuilt#34
codeGlaze wants to merge 746 commits into
developfrom
f1852203-accounts

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 10, 2026
Commits on Sep 12, 2026
Commits on Sep 13, 2026
Commits on Sep 14, 2026
Commits on Sep 15, 2026
Commits on Sep 17, 2026
- Keep the phone header from crowding itself
  codeGlaze
  committed
  0a08934
- Take the Garden class definitions off the stalled refactor branch
  codeGlaze
  committed
  47bb73f
- Put the registration and login pages on the harvested classes
  codeGlaze
  committed
  2c9c553
Commits on Sep 18, 2026
- Qualify the get-auth-token call that no longer resolves
  codeGlaze
  committed
  67a1e18
- Mint every key with its source's tag, and let a source choose that tag
  codeGlaze
  committed
  ed4f5a4
- Merge fix/get-auth-token-undeclared into integration
  codeGlaze
  committed
  faaca0c
- Merge feat/source-tagged-keys into integration
  codeGlaze
  committed
  1bb3eb2
- Judge passwords by length and shape, not by character classes
  codeGlaze
  committed
  43a56c6
- Refuse passwords the breach corpus already knows
  codeGlaze
  committed
  b459e6b
Commits on Sep 19, 2026
- Tell people the password is common, not that it was breached
  codeGlaze
  committed
  de84a01
- Require clojure.string in the breach test rather than leaning on it being loaded
  codeGlaze
  committed
  db63d2c
- Say too common, the way the strength meter would say it
  codeGlaze
  committed
  073bd27
- Cut the explanation to one line, and keep it out of the form
  codeGlaze
  committed
  14f88cd
- Drop the explanation string; it had nowhere to go
  codeGlaze
  committed
  9632975
- Consult the per-address throttle that login never asked
  codeGlaze
  committed
  5f4d34b
- Stop password reset from answering whether an address is registered
  codeGlaze
  committed
  3570624
- Warn an account holder when one account is tried from several places
  codeGlaze
  committed
  b2aefc9
- Put a time and a browser in the sign-in notice
  codeGlaze
  committed
  4f75360
- Close the login oracle, cap the mail endpoints, raise the minimum to 12
  codeGlaze
  committed
  70c3f49
- Make the breach check auditable instead of silently fail-open
  codeGlaze
  committed
  79e7a32
- Keep only a digest of the reset key, and expire it in two hours
  codeGlaze
  committed
  cfd39eb
Commits on Sep 20, 2026
- Give the server's objections somewhere to appear, and cap registration
  codeGlaze
  committed
  91acfcd
- Set the registration cap by the table it must not break
  codeGlaze
  committed
  cc5f865
- Count what the limits turn away, so the numbers can be tuned
  codeGlaze
  committed
  a744b6d
- Close the separator hole, and actually raise the minimum this time
  codeGlaze
  committed
  ad5ebcb
- Tell one host hammering apart from a pool of them
  codeGlaze
  committed
  40d6ea2
- Make the meter ask the validator instead of guessing alongside it
  codeGlaze
  committed
  389b036
- Write down what this branch raised and did not do
  codeGlaze
  committed
  62c8da4
- Serve the password-changed page
  codeGlaze
  committed
  6b72b90
- Stop the register form and a dead reset link looking broken
  codeGlaze
  committed
  2f3c873
- Record the .lein-env clobbering that breaks a parallel e2e boot
  codeGlaze
  committed
  934f5aa
- Open the auth redesign branch with the decisions it implements
  codeGlaze
  committed
  ca9f084
- Give the shared message components a light ground
  codeGlaze
  committed
  935c996
- Build the notched auth field
  codeGlaze
  committed
  c9c6732
- Correct the shell claim, and write down the order of the rest
  codeGlaze
  committed
  ae0e80f
- Move the heading into the shell, as ink with an amber rule
  codeGlaze
  committed
  3b1ac94
- Stop a margin utility from making 194 places bold
  codeGlaze
  committed
  042ee59
- Summarise what is wrong above the form, and fix the tail
  codeGlaze
  committed
  70b6a41
- Confirm the password, until you can read it
  codeGlaze
  committed
  141894f
- Offer a correction when the email domain looks mistyped
  codeGlaze
  committed
  bd43434
- Record progress, the measured blast radius, and where the record lives
  codeGlaze
  committed
  25dd04c
- Ignore the agent entry point on this branch
  claude
  committed
  a0d9e1d
- Merge refactor/garden-harvest: the harvested Garden classes and the phone header fix
  codeGlaze
  committed
  807bce1
- Merge integration-local: resolve the auth pages against the harvested classes
  codeGlaze
  committed
  4005a46
- Refuse a password for the corpus only when it is egregiously common
  codeGlaze
  committed
  cef432a
- Sweep the auth pages: the doubled legal links, the one-word link, the tiled gryphon
  codeGlaze
  committed
  ecb1319
- Record the sweep, and put the phone gutters back where they belong
  codeGlaze
  committed
  0b6b5c3
- Merge feature/auth-redesign: the password rules, the breach screening and the auth pass
  codeGlaze
  committed
  bdc5867
- Merge feature/mobile-layout: the share line and the phone-width fixes
  codeGlaze
  committed
  d813119
- Put the last three auth pages on the shared heading
  codeGlaze
  committed
  d476dbd
- Password reset told nobody why it would not go
  codeGlaze
  committed
  0380fc9
Commits on Sep 21, 2026
Commits on Sep 22, 2026
- Share the password-making area between the two places a password is made
  codeGlaze
  committed
  c3ddbb6
- Write down what the reset page's identifier check knows, and why
  codeGlaze
  committed
  6d0b847
Commits on Sep 23, 2026
- Tell people when their credentials change, and take a password to move an account
  codeGlaze
  committed
  bbf3328
Commits on Sep 24, 2026
Commits on Sep 25, 2026
Commits on Sep 26, 2026
Commits on Sep 27, 2026
Commits on Sep 28, 2026
Commits on Sep 29, 2026
Commits on Sep 30, 2026
- Merge the comment check (#38) into the homebrew-keys fix
  codeGlaze
  committed
  502f356
- Reconcile the comment check with this branch's code
  codeGlaze
  committed
  332ae1d
- Branch changelog for the homebrew-keys fix
  codeGlaze
  committed
  95835fd
- Fold the branch changelog into Summer Patch
  codeGlaze
  committed
  bcba3bf
- Changelog: say where the write gate refuses and where it reports
  codeGlaze
  committed
  6fdccb6
- Merge port/save-gate into integration (#37)
  codeGlaze
  authored
  614c17f
- Party add/remove answer with the updated party
  codeGlaze
  committed
  d09964c
- Fix the comment check's recorded debt: 309 hits, baseline now empty
  codeGlaze
  committed
  ac0dc95
- Fold the fix/comment-debt changelog into Summer Patch
  codeGlaze
  committed
  cbc2e74
- Merge fix/comment-debt into integration (#39)
  codeGlaze
  authored
  1aa80ec
Commits on Oct 1, 2026
- Merge integration into the accounts branch
  codeGlaze
  committed
  afa2ac3
- comments: bring the accounts batch to the comment rule
  codeGlaze
  committed
  8571809
- Set broken homebrew aside through the library gate
  codeGlaze
  committed
  f1e2671
Commits on Oct 2, 2026