- Enterprise SAML/OIDC callbacks used raw 'sso_xxx' string as passwordHash which would crash bcrypt.compare(). Now uses userRepo.hashPassword(randomUUID()) - Added updateLastLogin() for existing enterprise SSO users - Upgraded bcrypt cost factor from 10 to 12 per PRD spec - All 53 auth tests passing |
||
|---|---|---|
| .. | ||
| scripts | ||
| src | ||
| .gitignore | ||
| Dockerfile | ||
| package.json | ||
| tsconfig.json | ||
| vitest.config.ts | ||