Andras Bacsai 49b5472961 refactor(auth): upgrade email verification hash to sha256 ...

Move the email-verification URL hash from sha1 to sha256 and verify it
directly in the controller using hash_equals, instead of going through
Laravel's EmailVerificationRequest (which only compares against sha1).
The signed URL still carries the authoritative HMAC; the hash upgrade
keeps the identity binding aligned with modern hashing guidance.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-20 12:09:48 +02:00

..

Api

refactor(api): return generic error messages for upstream and storage failures

2026-04-20 11:50:30 +02:00

Webhook

refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification

2026-04-19 12:52:23 +02:00

Controller.php

refactor(auth): upgrade email verification hash to sha256

2026-04-20 12:09:48 +02:00

OauthController.php

Revert "rector: arrrrr"

2025-01-07 15:31:43 +01:00

UploadController.php

refactor(backup): validate database backup upload file type and size

2026-04-20 11:45:00 +02:00