-
Notifications
You must be signed in to change notification settings - Fork 2
Pull requests: VilnaCRM-Org/user-service
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
ci: stabilize main pipeline (phpinsights, xdebug, schemathesis)
#338
opened Jun 11, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): make account-lockout failure counter atomic (#324)
#337
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): harden password-reset request against enumeration & abuse (#321)
#336
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): stop leaking OAuth provider exception messages (#323)
#335
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): add 2FA brute-force counter and TOTP replay protection (#314)
#334
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): scope user read operations to the owner (#320)
#333
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): remove unsalted SHA-256 recovery-code fallback (#322)
#332
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): hash password-reset tokens at rest (#313)
#331
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): fail-closed CORS default for prod image (#319)
#330
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): apply per-endpoint rate limiters to GraphQL auth mutations (#315)
#329
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): trust proxy hop so IP rate limits key on real client IP (#316)
#328
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): confine Schemathesis cleanup listener to test env (#317)
#327
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): treat Facebook OAuth email as unverified (#318)
#326
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
fix(security): reject non-first-party tokens, stop ROLE_SERVICE inference (#312)
#325
opened Jun 9, 2026 by
dmytrocraft
Contributor
Loading…
feat(#302): replace LocalStack with Floci for local AWS/SQS emulation
#303
opened Jun 1, 2026 by
nanoclbot
Loading…
docs: optimize code-review skill via Tessl evals
#289
opened May 24, 2026 by
Derane
Contributor
Loading…
10 of 13 tasks
feat: add passkey authentication
#286
opened May 10, 2026 by
dmytrocraft
Contributor
Loading…
10 of 13 tasks
Refactor registration command CQRS flow
#282
opened May 10, 2026 by
dmytrocraft
Contributor
Loading…
10 of 13 tasks
feat(#116): add action for deploy to prod
backend
enhancement
New feature or request
#117
opened Jan 3, 2025 by
Kravalg
Contributor
Loading…
1 of 13 tasks
ProTip!
Exclude everything labeled
bug with -label:bug.