security: secure session cookie flags + expiring password-reset tokens - #225

Closed

Crackhead-gsk wants to merge 2 commits into

MythicalLTD:mainfrom

Crackhead-gsk:fix/session-cookie-security-flags

Commits on Sep 5, 2026

security: fix auth account enumeration and add per-account lockout
Crackhead-gsk
committed
a048c46
wip: session cookie security flags + reset-token expiry
Crackhead-gsk
committed
b6cacb8