Juan Fernandez e5b0f313f9 Fix password reset accepting case-mutated tokens ...

Reset tokens are base64url (case-sensitive) but the
password_reset_requests.token column used case-insensitive
utf8mb4_unicode_ci, so a case-mutated token copy still matched. Switch
the column to utf8mb4_bin for byte-exact comparison.

2026-07-30 13:59:24 -04:00

..

acl

…

activity

…

api_endpoints

Move "Install self-service software" endpoint to public REST API docs (#49618)

2026-07-22 18:51:50 -05:00

archtest

…

authz

Release from AB backend support (#49680)

2026-07-22 20:01:41 +02:00

aws_common

…

bindata

…

chart

Enforce API-only endpoint restrictions on chart routes (#49477)

2026-07-23 10:44:13 -04:00

config

Allow bypassing network blocking in production via config (#49747)

2026-07-22 13:23:21 -03:00

contexts

…

cron

Android certificates resent_certificate (#49171)

2026-07-13 13:22:50 -05:00

crypto

…

datastore

Fix password reset accepting case-mutated tokens

2026-07-30 13:59:24 -04:00

dev_mode

…

errorstore

…

fleet

Match Windows software with version in name to FMA software title

2026-07-30 09:49:52 -04:00

goose

…

health

…

launcher

…

live_query

Skip live-query reverse-index read when no reverse queries are active

2026-07-13 09:53:37 -04:00

logging

…

mail

…

mdm

Bound Android device reconciliation pagination loop (#49615)

2026-07-30 12:08:17 -05:00

mock

Match Windows software with version in name to FMA software title

2026-07-30 09:49:52 -04:00

platform

…

policies

…

ptr

…

pubsub

…

service

Stop leaking live query campaign existence via the websocket results stream (#50210)

2026-07-30 12:01:39 -03:00

shellquote

…

sso

…

test

…

variables

…

version

…

vulnerabilities

Generate CPE for Firefox Developer Edition on macOS

2026-07-22 08:04:38 -04:00

webhooks

…

websocket

…

worker

Add Android support for custom host vitals (#49696)

2026-07-29 08:22:57 -03:00

utils_test.go

…

utils.go

…