Karl Jussila ee72d71872 fix(auth): centralize password and username validation constants (#4120) ...

Added PASSWORD_MIN_LENGTH and RESERVED_USERNAMES to src/constants.py as the
single source of truth. Previously PASSWORD_MIN_LENGTH was hardcoded as 8 in
four route handlers and all three JS validation paths; RESERVED_USERNAMES was
an inline frozenset duplicated in core/auth.py, routes/assistant_routes.py,
routes/research_routes.py, and src/task_scheduler.py.

Added GET /api/auth/policy (unauthenticated) so the frontend reads the real
values from the server instead of hardcoding them in JS.

Added missing empty-username guard to /setup and admin POST /users. Both
returned a misleading 500/409 on whitespace-only input. /signup already had the
check; this makes all three consistent.

2026-06-16 09:52:15 +02:00

..

fonts

Odysseus v1.0

2026-05-31 23:58:26 +09:00

icons

pwa missing icons added (#428)

2026-06-15 16:00:13 +09:00

js

fix(auth): centralize password and username validation constants (#4120)

2026-06-16 09:52:15 +02:00

lib

Odysseus v1.0

2026-05-31 23:58:26 +09:00

app.js

Merge remote-tracking branch 'origin/dev' into test-main-dev-merge-20260615

2026-06-15 21:20:15 +09:00

icon.ico

feat(launcher): add portable windows launcher (#976)

2026-06-16 04:58:16 +01:00

index.html

fix(auth): centralize password and username validation constants (#4120)

2026-06-16 09:52:15 +02:00

login.html

fix(auth): centralize password and username validation constants (#4120)

2026-06-16 09:52:15 +02:00

manifest.json

pwa missing icons added (#428)

2026-06-15 16:00:13 +09:00

style.css

Merge remote-tracking branch 'origin/dev' into test-main-dev-merge-20260615

2026-06-15 21:20:15 +09:00

sw.js

fix(ui): modal drag + removed startDrag func (#2430)

2026-06-04 20:34:18 +02:00