efitenandClaude Opus 5.5 c370678f4b feat(observer-logins): account endpoints and credentials mail ...

GET/POST /api/account/observer-login and POST .../resend, gated on
userManagement.observerLogins. The password is hashed for the broker and
sealed for resend; it only leaves the server in the credentials mail
(three pre blocks: meshcoretomqtt, Dutch-MeshCore firmware, plain).
Resend is limited to 3 credential mails per 24 h (mail_log count).
The account export gains the login metadata and bindings, never the
credential material. /api/config/client announces observerLogins.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-25 15:55:27 +01:00

..

decrypt

perf(sqlite): swap modernc.org/sqlite for mattn/go-sqlite3, cross-built with zig (#1992)

2026-09-16 09:02:13 +02:00

ingestor

test: make hop coverage clock checks deterministic (#2273)

2026-10-25 12:10:14 +01:00

migrate

perf(sqlite): swap modernc.org/sqlite for mattn/go-sqlite3, cross-built with zig (#1992)

2026-09-16 09:02:13 +02:00

server

feat(observer-logins): account endpoints and credentials mail

2026-10-25 15:55:27 +01:00