Jakub Zych 174161895e fix: atomic unlink with the PHP last-identity rule ...

- OAuthIdentitiesDestroy locks the users row (SELECT ... FOR UPDATE) and runs
  the PHP guarded DELETE in one transaction: a self-set password or another
  identity allows the unlink; otherwise 409 with the unchanged body
- the default allow-list adds microsoft, and an OAuthProviderSource's known
  names are used when the host passes no Providers
- TestOAuthIdentitiesDestroyLastIdentityWithPassword (204),
  TestOAuthIdentitiesDestroyConcurrentSmoke; README
- gofmt of the forgotPasswordBody line touched in the previous commit

2026-10-20 23:05:14 +02:00

..

organisations

feat: Organisations admin screen with the avatar and the members manager

2026-10-05 13:58:54 +02:00

usergroups

feat: User Groups admin screen with the users count and privileged codes protected

2026-10-05 13:52:26 +02:00

users

feat: create users with a password and an invitation in the admin

2026-10-05 13:21:51 +02:00

admin_registry.go

feat: Organisations admin screen with the avatar and the members manager

2026-10-05 13:58:54 +02:00

api_controller.go

fix: atomic unlink with the PHP last-identity rule

2026-10-20 23:05:14 +02:00

api_tokens.go

feat: own shared user API tokens

2026-10-04 22:30:20 +02:00

app_access.go

feat: User Groups admin screen with the users count and privileged codes protected

2026-10-05 13:52:26 +02:00

oauth_identities.go

fix: atomic unlink with the PHP last-identity rule

2026-10-20 23:05:14 +02:00

organisations_admin_controller.go

feat: Organisations admin screen with the avatar and the members manager

2026-10-05 13:58:54 +02:00

registration.go

feat: provider source for oauth-providers and sign-in helpers for social login

2026-10-20 23:02:37 +02:00

request_db.go

feat: register the Users admin screen with the privileged-member guard

2026-10-05 13:01:48 +02:00

usergroups_admin_controller.go

feat: User Groups admin screen with the users count and privileged codes protected

2026-10-05 13:52:26 +02:00

users_admin_controller.go

feat: fire user.Deactivating from the admin deactivate action

2026-10-19 19:06:20 +02:00

winter_error_page.html

feat(07-07): replay the 15 user-api routes and both nuxt auth flows

2026-09-22 23:57:00 +02:00