2 Commits

Author	SHA1	Message	Date
Alexander Laurent	a98889cd76	feat: add Go MCP server update API (#15261) ... ## What #15240 implementation for PUT /api/v1/mcp/servers/:mcp_id ## Changes - Adds the Go implementation for `PUT /api/v1/mcp/servers/:mcp_id`. - Wires MCP service and handler into the Go server/router for the update route. - Preserves Python-style behavior for ownership checks, partial update fields, MCP type/name/URL validation, `headers`/`variables` normalization, and tool metadata scrubbing.	2026-06-02 15:58:44 +08:00
web-dev0521	1696d4ead6	feat(go-api): implement password-reset flow (issue #15282) (#15293) ... ## Summary Ports the Python password-reset flow to Go, adding 4 unauthenticated endpoints under `/api/v1/auth/password/`: - `POST /auth/password/forgot/captcha` — generates and returns a PNG captcha image; stores the plaintext code in Redis (60 s TTL) - `POST /auth/password/forgot/otp` — verifies captcha, enforces resend cooldown (60 s), generates HMAC-SHA256-hashed OTP (300 s TTL), sends plain-text email via SMTP - `POST /auth/password/forgot/otp/verify` — verifies OTP with attempt counting (lock after 5 failures for 30 min), sets a `otp:verified:{email}` flag (300 s TTL) on success - `POST /auth/password/reset` — checks verified flag, decrypts + validates passwords, updates user record, auto-logs in (issues JWT, returns user profile) Closes #15282	2026-06-02 09:38:02 +08:00