root e045e00fbf feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand ...

Add self-service password change that re-hashes the credential and bumps a
per-user session version so all existing access/refresh tokens are rejected.
Session version is tracked in Redis with an in-memory fallback and enforced in
middleware and refresh.

Scope prompt rules and rule groups to a brand: new brand_id column (migrated to
a "未归属" fallback brand for existing rows), brand-filtered queries/indexes, and
brand-aware admin-web tabs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-20 18:09:53 +08:00

..

claims.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

context_test.go

feat(auth): add workspace scope middleware and context

2026-04-24 22:18:54 +08:00

context.go

feat: scope articles by brand

2026-05-20 15:37:25 +08:00

jwt_test.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

jwt.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

login_guard_test.go

feat(login-guard): unlock entire scope and report deleted keys

2026-05-02 20:56:38 +08:00

login_guard.go

feat(login-guard): unlock entire scope and report deleted keys

2026-05-02 20:56:38 +08:00

middleware_test.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

middleware.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

password_cipher_test.go

feat(auth): support per-deploy login password key override

2026-05-14 11:54:40 +08:00

password_cipher.go

feat(auth): support per-deploy login password key override

2026-05-14 11:54:40 +08:00

permissions_test.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

permissions.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

session_store_test.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00

session_store.go

feat(auth,prompt-rule): add password change with session revocation and scope prompt rules by brand

2026-05-20 18:09:53 +08:00