IT狗 5596ab2cb5 feat(auth): add admin-only /api/auth/reset-password endpoint ...

POST /api/auth/reset-password
Body: { email, new_password }
Auth: requires admin role (get_current_admin)
Response: { ok, email, id, reset_by }

- Validates new_password >= 6 chars
- Returns 404 if target email not found
- Logs admin_id + target_user_id for audit trail
- Fixes passlib sha256_crypt cross-version verify bug by allowing
  admin to rehash any user's password on demand

2026-07-22 10:56:09 +08:00

..

parsers

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

.gitignore

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

auth.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

database.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

logging_config.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

main.py

feat(auth): add admin-only /api/auth/reset-password endpoint

2026-07-22 10:56:09 +08:00

middleware.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

migrate_phase2.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

models.py

Accident schema: rename employee_name -> submitter_email (clearer semantic)

2026-07-20 00:05:05 +08:00

report_template.html

Add Settings page, List page, report template

2026-07-21 01:56:10 +08:00

requirements.txt

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

schemas.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

secret.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00

test_backend.py

Initial commit: AARS backend + frontend + holiday/leave phase 1+2

2026-07-19 20:10:15 +08:00