Frederic Cabassut e4606cfc70 feat(auth): enable password login on OAuth-only accounts, with disable control ...

Admins can now reset the password of an OAuth-only user, which creates
their credentials and enables password login; the new 'Disable password
login' row action removes those credentials again. Resetting a password
revokes all existing sessions.

- add users.password_login_enabled column (migration 0005)
- admin reset: set password, enable login, revoke sessions
- disable action: clear password, disable login (only on OAuth-linked rows)
- account endpoint: refuse password updates on OAuth-linked users
- e2e: wipe the test DB before the webServer starts (Playwright starts
  the server before globalSetup, so wiping there orphaned the DB file)
- row-actions strip test: five square actions, wrap on phone widths

2026-08-19 13:18:56 +02:00

..

meta

feat(auth): enable password login on OAuth-only accounts, with disable control

2026-08-19 13:18:56 +02:00

0000_wooden_vargas.sql

feat: add image attachment backend — batch fetch, API responses, optimization, thumbnails

2026-03-08 22:37:50 +01:00

0001_strange_lord_hawal.sql

fix: enforce note ownership across all API endpoints

2026-03-09 01:50:12 +01:00

0002_deep_black_widow.sql

feat: add user preferences system

2026-03-10 15:07:19 +01:00

0003_uneven_tomorrow_man.sql

feat: add shared_notes schema and NoteShare types

2026-03-20 22:06:41 +01:00

0004_violet_nicolaos.sql

add notelinks tabel for note to note references

2026-08-05 10:51:08 +02:00

0005_green_raider.sql

feat(auth): enable password login on OAuth-only accounts, with disable control

2026-08-19 13:18:56 +02:00