flask: Add internal password sync endpoint + strip password hash from API responses (2/3 split of #73) - #75

Merged

jm1021 merged 4 commits into

Open-Coding-Society:mainfrom

CSA-Admin-OCS:split/flask/f2-password-sync-and-hash-leak

Sep 10, 2026

Commits on Aug 24, 2026

Add internal password sync endpoint for Spring-verified resets

RudraBJoshi
and
claude
committed
8586b8a
Strip password hash from general-purpose user API responses
RudraBJoshi
committed
ff021f7

Commits on Aug 31, 2026

Return 500 from internal password sync when the update didn't happen

RudraBJoshi
and
claude
committed
c8115fa

Commits on Sep 8, 2026

Replace internal Spring sync endpoint with frontend-facing reset-password

RudraBJoshi
and
claude
committed
b57ee69