GrottoCenter / grottocenter-api / 23977101759

86%

develop: 87%

Pull #1525

github

feat(caver): add admin ban/unban endpoints with security hardening

- Add POST /cavers/:caverId/ban and /unban admin-only endpoints
- Activate banned, date_last_connection, connection_counter columns on t_caver
- Reject banned cavers on login with generic 401 (no ban status leakage)
- Suppress forgot-password email for banned cavers (silent 200)
- Block password change via reset token for banned cavers (same as expired)
- Prevent account enumeration on sign-up (generic conflict message)
- Log warnings server-side for all banned caver activity

2791 of 3428 branches covered (81.42%)

Branch coverage included in aggregate %.

65 of 68 new or added lines in 12 files covered. (95.59%)

5866 of 6697 relevant lines covered (87.59%)

74.14 hits per line