SnapOtterandGitHub 059af34ace fix(gdpr): stop exporting MFA credentials and gate exports on role authority (#706) ...

The subject-access export selected the whole users row and subtracted only
passwordHash, so profile.json carried totpSecret and recoveryCodesHash. On a
default install DATA_ENCRYPTION_KEY is empty and the TOTP seed is stored as
cleartext base32; recovery codes are 32-bit values behind an unsalted SHA-256.

Name the profile columns instead, add the canManageTargetRole gate the sibling
purge routes already apply, and scope the export status lookup to the user in
the path plus the gdpr-export tool id.

2026-08-01 14:16:36 +08:00

..

api

fix(gdpr): stop exporting MFA credentials and gate exports on role authority (#706)

2026-08-01 14:16:36 +08:00

demo

…

docs

docs(deployment): note the WSL2 Windows-host loopback gap (#689)

2026-07-30 10:31:04 +08:00

landing

fix(landing): derive conversion-preset copy from real format differences (#663)

2026-07-28 17:08:53 +08:00

web

…