Lucas Berger c88f7d41e5 feat(19-02): self-change password and hasLocalCredential on GET /api/me ...

- POST /api/me/password: verifyPassword(current) gate before hashPassword(new) update
- 401 on wrong current password, 404 if no local_credentials row, 200 on success
- meNoEchoHook on /password route (T-19-06, never echo submitted password)
- resolveAdminAndSetupStatus extended with hasLocalCredential (AUTH-LOCAL-17)
- GET /api/me response includes hasLocalCredential alongside isAdmin/needsProviderSetup

2026-06-17 16:34:10 -04:00

..

api

feat(19-02): self-change password and hasLocalCredential on GET /api/me

2026-06-17 16:34:10 -04:00

pwa

fix(12): unblock CI security + harness jobs

2026-06-16 18:24:10 -04:00