Fix password reset security: user enumeration, weak tokens, plaintext storage, missing TTL#2961

Merged

dpfaffenbauer merged 3 commits into4.1from

copilot/improve-password-reset-security

Apr 15, 2026

Commits on Jan 29, 2026

Initial plan
Copilot
committed
Fix password reset security issues: user enumeration, weak tokens, plaintext storage, and missing TTL

Copilot
and
dpfaffenbauer
committed
Address code review feedback: token format validation, TTL validation, immutable datetime handling

Copilot
and
dpfaffenbauer
committed