web-dev0521 1696d4ead6 feat(go-api): implement password-reset flow (issue #15282) (#15293) ...

## Summary

Ports the Python password-reset flow to Go, adding 4 unauthenticated
endpoints under `/api/v1/auth/password/`:

- `POST /auth/password/forgot/captcha` — generates and returns a PNG
captcha image; stores the plaintext code in Redis (60 s TTL)
- `POST /auth/password/forgot/otp` — verifies captcha, enforces resend
cooldown (60 s), generates HMAC-SHA256-hashed OTP (300 s TTL), sends
plain-text email via SMTP
- `POST /auth/password/forgot/otp/verify` — verifies OTP with attempt
counting (lock after 5 failures for 30 min), sets a
`otp:verified:{email}` flag (300 s TTL) on success
- `POST /auth/password/reset` — checks verified flag, decrypts +
validates passwords, updates user record, auto-logs in (issues JWT,
returns user profile)

Closes #15282

2026-06-02 09:38:02 +08:00

..

oauth

feat(go-api): implement password-reset flow (issue #15282) (#15293)

2026-06-02 09:38:02 +08:00

convert.go

Implement retrieval_test in GO (#14231)

2026-04-24 15:30:14 +08:00

embedding_lru.go

RAGFlow go API server (#13240)

2026-03-04 19:17:16 +08:00

file.go

feat: Implement file-related functionality (#14011)

2026-04-10 12:15:27 +08:00

http_client.go

Add scheduled tasks (#13470)

2026-03-09 17:48:29 +08:00

network.go

Go: add volcengine (#14409)

2026-04-28 12:12:58 +08:00

path.go

Implement Create/Drop Index/Metadata index in GO (#13791)

2026-03-26 11:54:10 +08:00

scheduled_task.go

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

token.go

Fix user registration initialization in Go API (#15349)

2026-05-29 19:29:23 +08:00

version_test.go

RAGFlow go API server (#13240)

2026-03-04 19:17:16 +08:00

version.go

RAGFlow go API server (#13240)

2026-03-04 19:17:16 +08:00