GrottoCenter / grottocenter-api / 23976480113

86%

develop: 87%

Build Type

Pull #1525

github

Committed by ClemRz

Commit Message

feat(caver): add admin ban/unban endpoints with security hardening

- Add POST /cavers/:caverId/ban and /unban admin-only endpoints
- Activate banned, date_last_connection, connection_counter columns on t_caver
- Reject banned cavers on login with generic 401 (no ban status leakage)
- Suppress forgot-password email for banned cavers (silent 200)
- Block password change via reset token for banned cavers (same as expired)
- Prevent account enumeration on sign-up (generic conflict message)
- Log warnings server-side for all banned caver activity

Pull Request Pull Request #1525: feat(caver): add admin ban/unban endpoints with security hardening

Coverage Stats

2790 of 3428 branches covered (81.39%)

Branch coverage included in aggregate %.

59 of 62 new or added lines in 9 files covered. (95.16%)

2 existing lines in 1 file now uncovered.

5863 of 6696 relevant lines covered (87.56%)

73.78 hits per line