• 0.1.4 7ca1a1706f

    brian released this 2026-06-17 21:34:31 +00:00 | 1 commits to main since this release

    0.1.4 — Password reset fixes

    Fixed

    • Route ordering — Moved /api/password-reset before auth-guarded /api mount so forgot-password requests aren't intercepted by the auth middleware ("No token provided" error)
    • Validation handling — Added validationResult() calls to both forgotPassword and resetPassword controllers; invalid input now returns proper 400 errors instead of silently passing through
    • SMTP check — Removed emailEnabled guard that only checked environment variables; the controller now always calls sendPasswordResetEmail, which checks both env vars and database SMTP config (matching how the admin UI test email works)
    • Guest layout — Navbar/sidebar no longer shown on ForgotPassword, ResetPassword, VerifyEmail, and OAuthCallback pages; uses route.meta.guest instead of individual route name checks
    • Security — Removed resetToken from API response body (was leaked in development mode)

    Docker Images

    • docker.io/bmcgonag/get_healthy_backend:0.1.4
    • docker.io/bmcgonag/get_healthy_frontend:0.1.4
    Downloads