web-dev0521 1696d4ead6 feat(go-api): implement password-reset flow (issue #15282) (#15293) ...

## Summary

Ports the Python password-reset flow to Go, adding 4 unauthenticated
endpoints under `/api/v1/auth/password/`:

- `POST /auth/password/forgot/captcha` — generates and returns a PNG
captcha image; stores the plaintext code in Redis (60 s TTL)
- `POST /auth/password/forgot/otp` — verifies captcha, enforces resend
cooldown (60 s), generates HMAC-SHA256-hashed OTP (300 s TTL), sends
plain-text email via SMTP
- `POST /auth/password/forgot/otp/verify` — verifies OTP with attempt
counting (lock after 5 failures for 30 min), sets a
`otp:verified:{email}` flag (300 s TTL) on success
- `POST /auth/password/reset` — checks verified flag, decrypts +
validates passwords, updates user record, auto-logs in (issues JWT,
returns user profile)

Closes #15282

2026-06-02 09:38:02 +08:00

..

local

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

config.go

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

model_provider.go

Fix Gitee embedding model URL error (#13553)

2026-03-12 13:13:06 +08:00

variable.go

Go: fix auth issue in hybrid mode (#14611)

2026-05-07 17:14:22 +08:00