feat(auth): add password reset flow

Add admin-generated reset links, reset UI, timezone-aware expiry display, and registration captcha coverage.
2026-07-06 17:55:10 +08:00
parent 2fdbaa8876
commit c7ee2adb82
14 changed files with 1307 additions and 47 deletions
@@ -43,6 +43,8 @@ class Config:
    ALLOW_REGISTRATION = env_bool("ALLOW_REGISTRATION", False)
    ADMIN_USERNAME = os.environ.get("ADMIN_USERNAME", "admin").strip() or "admin"
    ADMIN_PASSWORD = os.environ.get("ADMIN_PASSWORD")
+    APP_TIMEZONE = os.environ.get("APP_TIMEZONE", "Asia/Shanghai").strip() or "Asia/Shanghai"
+    PASSWORD_RESET_TOKEN_MINUTES = env_int("PASSWORD_RESET_TOKEN_MINUTES", 30)


 def ensure_dirs() -> None: