Cockatrice/servatrice/src
BruebachL 50a2ae9cc8
[Server/Client] Enforce and complete the forced password change at login (#7680)
checkUserPassword ignored force_password_change on the challenge-response
path, so a reset password stayed valid. Returning PasswordChangeRequired
was not enough on its own: the session was dropped and the client told the
user to ask the administrator for the temporary password they had just used.

The pending session now keeps its identity without registering a user
session or announcing a join, may only ping and change its password, and
the client completes the change in-session before reconnecting.

Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de>
2026-11-02 07:01:29 +01:00
..
smtp [SMTP] Add reliable email delivery with retry and database-backed queue (#7240) 2026-10-11 20:59:32 +02:00
deck_tag_serialization.h [Server] Add deck share links and public deck visibility (#7241) 2026-09-20 20:22:16 +02:00
email_parser.cpp [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
email_parser.h Fix #4903: Parse Email Addresses whenever used (#4932) 2023-12-09 00:52:47 -05:00
event_loop_watchdog.cpp [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
event_loop_watchdog.h [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
forwarded_address.cpp [Server] Parse the rightmost address from forwarded header lists (#7586) 2026-10-18 16:53:55 -04:00
forwarded_address.h [Server] Parse the rightmost address from forwarded header lists (#7586) 2026-10-18 16:53:55 -04:00
isl_interface.cpp [Servatrice] Fix silently broken socket error connections (#7626) 2026-10-31 19:02:55 +01:00
isl_interface.h [Servatrice] Relay room channel messages over ISL (#7480) 2026-10-16 22:46:40 +02:00
main.cpp [Servatrice] Fail loudly when startup initialization fails (#7602) 2026-10-31 19:02:49 +01:00
main.h Refactor servatrice email send 2015-07-25 18:48:34 +02:00
metrics_registry.cpp [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
metrics_registry.h [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
ratelimiter.cpp [Server] Inform client of login/registration rate limit timeout (#7468) 2026-10-16 05:47:43 +02:00
ratelimiter.h [Server] Inform client of login/registration rate limit timeout (#7468) 2026-10-16 05:47:43 +02:00
servatrice.cpp [Servatrice] Fail loudly when startup initialization fails (#7602) 2026-10-31 19:02:49 +01:00
servatrice.h [Servatrice] Match trusted_sources by address, not substring (#7582) 2026-10-18 16:50:04 -04:00
servatrice_connection_pool.cpp clangify everything with the new header sorting (#3908) 2020-03-18 17:36:02 -04:00
servatrice_connection_pool.h [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
servatrice_database_interface.cpp [Server/Client] Enforce and complete the forced password change at login (#7680) 2026-11-02 07:01:29 +01:00
servatrice_database_interface.h [Server] Store a scrypt verifier when an admin resets a password (#7679) 2026-11-02 07:00:48 +01:00
server_logger.cpp [CardDB] Break the CardInfo <-> CardSet cycle on reload (#7645) 2026-10-31 19:37:15 +01:00
server_logger.h [CardDB] Break the CardInfo <-> CardSet cycle on reload (#7645) 2026-10-31 19:37:15 +01:00
serversocketinterface.cpp [Server/Client] Enforce and complete the forced password change at login (#7680) 2026-11-02 07:01:29 +01:00
serversocketinterface.h [Server/Client/Protocol] Let moderators clear banner cards (#7546) 2026-10-25 13:19:20 +01:00
settingscache.cpp [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
settingscache.h [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
signalhandler.cpp [Servatrice] Fail loudly when startup initialization fails (#7602) 2026-10-31 19:02:49 +01:00
signalhandler.h [Tooling] Apply include-what-you-use across the tree (#7396) 2026-10-08 11:13:50 +02:00
smtpclient.cpp [SMTP] Add reliable email delivery with retry and database-backed queue (#7240) 2026-10-11 20:59:32 +02:00
smtpclient.h [SMTP] Add reliable email delivery with retry and database-backed queue (#7240) 2026-10-11 20:59:32 +02:00
trusted_sources.cpp [Servatrice] Match trusted_sources by address, not substring (#7582) 2026-10-18 16:50:04 -04:00
trusted_sources.h [Servatrice] Match trusted_sources by address, not substring (#7582) 2026-10-18 16:50:04 -04:00