cb50d673c6
Reset and activation codes expire on a TTL, and a missing issued-at still accepts a cutover code. Forgot-password always returns the same 200 body. Co-authored-by: Cursor <cursoragent@cursor.com>
24 lines
864 B
Go
24 lines
864 B
Go
package user
|
|
|
|
import (
|
|
"git.golem15.com/golem15/fonoteka/plugins/golem15/user/controllers"
|
|
"git.golem15.com/golem15/summercms/pact"
|
|
"git.golem15.com/golem15/summercms/surf"
|
|
)
|
|
|
|
func (p *Plugin) Routes(r pact.Router) error {
|
|
r.Group("/_user/api/v1", surf.Use("throttle:user-api"), func(g pact.Router) {
|
|
g.Post("/login", controllers.Login(p.app))
|
|
g.Post("/logout", controllers.Logout(p.app))
|
|
g.Get("/fetch", controllers.Fetch(p.app))
|
|
g.Post("/refresh", controllers.Refresh(p.app))
|
|
g.Post("/register", controllers.Register(p.app))
|
|
g.Get("/oauth-providers", controllers.OAuthProviders(p.app))
|
|
g.Post("/forgot-password", controllers.ForgotPassword(p.app))
|
|
g.Post("/reset-password", controllers.ResetPassword(p.app))
|
|
g.Post("/activate", controllers.Activate(p.app))
|
|
g.Post("/activate-by-code", controllers.ActivateByCode(p.app))
|
|
})
|
|
return nil
|
|
}
|