hsiegeln 827ba3c798 feat: last-ADMIN guard and password hardening (#87, #89) ...

- Prevent removal of last ADMIN role via role unassign, user delete,
  or group role removal (returns 409 Conflict)
- Add password policy: min 12 chars, 3/4 character classes, no username
- Add brute-force protection: 5 attempts then 15min lockout, IP rate limit
- Add token revocation on password change via token_revoked_before column
- V9 migration adds failed_login_attempts, locked_until, token_revoked_before

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-09 08:58:03 +02:00

..

src

feat: last-ADMIN guard and password hardening (#87, #89)

2026-04-09 08:58:03 +02:00

pom.xml

feat: add server-side ExecutionChunk and FlatProcessorRecord DTOs

2026-03-31 19:02:47 +02:00