mirror of
https://github.com/hanzoai/base.git
synced 2026-10-21 03:41:50 +00:00
- forms/RecordUpsert no longer manages a plain password / confirm / oldPassword triple; Load + validateFormFields only handle the email + verified system fields now. DrySubmit + Submit semantics unchanged - apis/installer + apis/superuser_auth_oidc drop SetRandomPassword; the installer superuser and the OIDC auto-create path persist a verified passwordless record (IAM handles credentials) - apis/collection_test snapshots updated for the slimmer auth collection bootstrap (no system "password" field) and the smaller collection inventory (12 not 16); the now-stale "create-base- collection-with-oldPassword-rejected" test is deleted because the reserved-key check is gone - plugins/jsvm drops the PasswordField bind - plugins/zap returns 410 Gone for /identity (the only ZAP path that called record.ValidatePassword) — IAM PKCE is the only login - plugins/migratecmd test no longer probes a PasswordResetToken secret on auth collections - tests/dynamic_stubs loses StubMFARecords + StubOTPRecords; tests/token_helper loses GetUserPasswordResetToken