feat(auth): add password reset flow

Add admin-generated reset links, reset UI, timezone-aware expiry display, and registration captcha coverage.
2026-07-06 17:55:10 +08:00
parent 2fdbaa8876
commit c7ee2adb82
14 changed files with 1307 additions and 47 deletions
@@ -6,6 +6,12 @@ SECRET_KEY=
 ADMIN_USERNAME=admin
 ADMIN_PASSWORD=

+# Persist the app database in the mounted ./data directory.
+DATABASE_URL=sqlite:////app/data/pipe_survival_0331.db
+
+# Timezone used when displaying UTC timestamps.
+APP_TIMEZONE=Asia/Shanghai
+
 # Default: 16 MiB
 MAX_UPLOAD_BYTES=16777216

@@ -14,3 +20,6 @@ MODEL_PATH=/app/my_survival_forest_model_quxi-10-0331.joblib

 # Keep public registration closed by default.
 ALLOW_REGISTRATION=false
+
+# Minutes before an admin-generated password reset link expires.
+PASSWORD_RESET_TOKEN_MINUTES=30