Andras Bacsai
49b5472961
refactor(auth): upgrade email verification hash to sha256
...
Move the email-verification URL hash from sha1 to sha256 and verify it
directly in the controller using hash_equals, instead of going through
Laravel's EmailVerificationRequest (which only compares against sha1).
The signed URL still carries the authoritative HMAC; the hash upgrade
keeps the identity binding aligned with modern hashing guidance.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-04-20 12:09:48 +02:00
..
2026-04-19 12:52:23 +02:00
2026-03-31 13:45:31 +02:00
2026-04-20 11:27:10 +02:00
2026-03-31 13:45:31 +02:00
2024-12-10 08:50:07 +01:00
2025-10-11 11:16:28 +02:00
2026-03-31 13:45:31 +02:00
2026-03-29 21:25:41 +02:00
2026-03-30 13:35:35 +02:00
2026-03-29 21:25:41 +02:00
2026-03-31 13:51:06 +02:00
2026-03-31 10:52:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-29 21:25:41 +02:00
2026-03-29 21:25:41 +02:00
2026-03-29 21:25:41 +02:00
2026-03-29 21:25:41 +02:00
2025-06-18 14:29:46 +02:00
2024-06-10 20:43:34 +00:00
2026-03-16 21:27:10 +01:00
2026-03-31 13:51:06 +02:00
2026-03-31 13:45:31 +02:00
2026-03-29 21:25:41 +02:00
2026-04-20 11:51:51 +02:00
2026-04-03 11:33:21 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 14:44:45 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 11:07:52 +02:00
2026-03-29 21:25:41 +02:00
2025-02-07 19:36:52 +01:00
2026-03-31 13:45:31 +02:00
2026-04-19 11:55:12 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-03-31 13:45:31 +02:00
2026-04-19 11:55:12 +02:00
2026-03-31 13:45:31 +02:00
2026-04-15 15:12:29 +02:00
2025-09-25 11:33:32 +02:00
2026-03-29 21:25:41 +02:00
2026-04-20 12:09:48 +02:00
2025-08-12 10:07:11 +02:00
2025-11-25 15:35:01 +01:00