GrottoCenter / grottocenter-api / 23992142961

86%

develop: 87%

Build Type

Pull #1525

github

Committed by ClemRz

Commit Message

feat(caver): add admin ban/unban endpoints with security hardening

- Add POST /cavers/:caverId/ban and /unban admin-only endpoints
- Activate banned, date_last_connection, connection_counter columns on t_caver
- Reject banned cavers on login with generic 401 (no ban status leakage)
- Suppress forgot-password email for banned cavers (silent 200)
- Block password change via reset token for banned cavers (same as expired)
- Prevent account enumeration on sign-up (generic conflict message)
- Log warnings server-side for all banned caver activity

Pull Request Pull Request #1525: feat(caver): add admin ban/unban endpoints with security hardening

Coverage Stats

2788 of 3422 branches covered (81.47%)

Branch coverage included in aggregate %.

61 of 62 new or added lines in 12 files covered. (98.39%)

2 existing lines in 1 file now uncovered.

5860 of 6691 relevant lines covered (87.58%)

73.96 hits per line