flask: Add internal password sync endpoint + strip password hash from API responses (2/3 split of #73) - #75

Open

RudraBJoshi wants to merge 3 commits into

Open-Coding-Society:mainfrom

CSA-Admin-OCS:split/flask/f2-password-sync-and-hash-leak

Commits on Aug 24, 2026

Add internal password sync endpoint for Spring-verified resets

RudraBJoshi
and
claude
committed
8586b8a
Strip password hash from general-purpose user API responses
RudraBJoshi
committed
ff021f7

Commits on Aug 31, 2026

Return 500 from internal password sync when the update didn't happen

RudraBJoshi
and
claude
committed
c8115fa