isra el ede855e15a Merge branch 'main' into dev ...

Resolve auth.service.spec.ts by keeping dev's suite and porting the
password-reset lockout coverage from #238 into it.

Harden the lockout from #238 while merging:
- claim each attempt with an atomic findOneAndUpdate $inc, so concurrent
  guesses cannot all read the same count and slip past the cap
- match records predating the counter, which have no attempts field
- lift MAX_PASSWORD_RESET_ATTEMPTS to module scope and trim comments

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-19 20:53:52 +03:00

..

src

Merge branch 'main' into dev

2026-07-19 20:53:52 +03:00

test

…

.dockerignore

…

.env.example

…

.eslintrc.js

…

.gitignore

…

.prettierrc

…

Dockerfile

…

nest-cli.json

…

package.json

fix(billing): retain paid plan until period end on cancellation

2026-06-18 09:02:39 +03:00

pnpm-lock.yaml

…

Procfile

…

tsconfig.build.json

…

tsconfig.json

…