Feature Changes (detailed in description) - #168

Open

dhyantsoni wants to merge 10 commits into

Open-Coding-Society:masterfrom

CSA-Admin-OCS:master

Commits on Aug 20, 2026

Add OAuth + student ID verified password reset endpoints

RudraBJoshi
and
claude
committed
c33e6d7
Add reset-ticket admin escape hatch, fix reset-token secret and legacy reset link
RudraBJoshi
committed
261528b

Commits on Aug 21, 2026

Rate-limit reset-ticket creation and fix a silent 500 on every real request
RudraBJoshi
committed
4e13df6
Refuse to sync a plaintext password to Flask over a non-loopback, non-TLS URI
RudraBJoshi
committed
8a2d1af
Invalidate JWTs when a user's password changes
RudraBJoshi
committed
7fe1370
Instructions and docs
RudraBJoshi
committed
7f8fdf0
Fix POST /mvc/person/reset/ticket requiring login, defeating its purpose
RudraBJoshi
committed
091ecea
Add scripts/inject_reset_tickets.py for local testing of the ticket flow
RudraBJoshi
committed
384342c
Document the reset-ticket permitAll bug and the new injection script
RudraBJoshi
committed
e0c7028
task: add preliminary docs folder for future documentation
mataiodoxion
committed
dc105e4