web-dev0521 1696d4ead6 feat(go-api): implement password-reset flow (issue #15282) (#15293) ...

## Summary

Ports the Python password-reset flow to Go, adding 4 unauthenticated
endpoints under `/api/v1/auth/password/`:

- `POST /auth/password/forgot/captcha` — generates and returns a PNG
captcha image; stores the plaintext code in Redis (60 s TTL)
- `POST /auth/password/forgot/otp` — verifies captcha, enforces resend
cooldown (60 s), generates HMAC-SHA256-hashed OTP (300 s TTL), sends
plain-text email via SMTP
- `POST /auth/password/forgot/otp/verify` — verifies OTP with attempt
counting (lock after 5 failures for 30 min), sets a
`otp:verified:{email}` flag (300 s TTL) on success
- `POST /auth/password/reset` — checks verified flag, decrypts +
validates passwords, updates user record, auto-logs in (issues JWT,
returns user profile)

Closes #15282

2026-06-02 09:38:02 +08:00

..

admin

Go: add ingestion server (#15094)

2026-05-25 14:00:08 +08:00

binding

build(go): make bash build.sh work on macOS arm64 (Homebrew) (#15009)

2026-05-21 15:33:09 +08:00

cache

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

cli

Implement Elasticsearch functions in GO (#15160)

2026-05-25 19:15:07 +08:00

common

feat[Go]: implement /system/stats and refactor /system/config/log (#15407)

2026-05-29 19:32:21 +08:00

cpp

build(go): make bash build.sh work on macOS arm64 (Homebrew) (#15009)

2026-05-21 15:33:09 +08:00

dao

feat: add Go MCP server list API (#15253)

2026-06-02 09:37:05 +08:00

engine

Implement Elasticsearch functions in GO (#15160)

2026-05-25 19:15:07 +08:00

entity

fix(go-models): apply custom Google base URLs (#15385)

2026-06-01 19:24:29 +08:00

handler

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

ingestion

Go: add ingestion server (#15094)

2026-05-25 14:00:08 +08:00

proto

Go: add ingestion server (#15094)

2026-05-25 14:00:08 +08:00

router

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

server

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

service

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

storage

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

tokenizer

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

utility

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

development.md

Implement Elasticsearch functions in GO (#15160)

2026-05-25 19:15:07 +08:00