Enhance login form and register form -> password can be seen by PhoenixMaster123 · Pull Request #13 · PhoenixMaster123/Library-Management-System-Version-2

fix: report a rejected sign-in as bad credentials, not an expired session

PhoenixMaster123

committed

10d6be0

fix: generate an admin password when none is set, and let configuration reset it

PhoenixMaster123

committed

65ebd24

feat: lock an account out after repeated failed sign-ins

PhoenixMaster123

committed

5e17e75

feat: let signing out revoke a token instead of only forgetting it

PhoenixMaster123

committed

3ade6ad

feat: send a content security policy, HSTS and a referrer policy

PhoenixMaster123

committed

a418011

fix: answer unknown paths with 404, and stop echoing exception text to callers

PhoenixMaster123

committed

b59db5e

feat: disable Swagger by default, trust proxy headers, warn on the dev profile

PhoenixMaster123

committed

645095c

test: cover lockout, revocation and headers; restore the admin between tests

PhoenixMaster123

committed

d4d252d

fix: fall back to the ISBN when a search result carries no cover id

PhoenixMaster123

committed

20738e4

feat: add a reveal toggle to the sign-in and registration password fields

PhoenixMaster123

committed

21e24b7

fix: space the loan badge from the due date, and style the password toggle

PhoenixMaster123

committed

cd53dd9

Navigation Menu

Enhance login form and register form -> password can be seen - #13

Enhance login form and register form -> password can be seen#13
PhoenixMaster123 merged 11 commits into
mainfrom
fix/frontend-display

Commits on Aug 20, 2026

fix: report a rejected sign-in as bad credentials, not an expired session

fix: generate an admin password when none is set, and let configuration reset it

feat: lock an account out after repeated failed sign-ins

feat: let signing out revoke a token instead of only forgetting it

feat: send a content security policy, HSTS and a referrer policy

fix: answer unknown paths with 404, and stop echoing exception text to callers

feat: disable Swagger by default, trust proxy headers, warn on the dev profile

test: cover lockout, revocation and headers; restore the admin between tests

fix: fall back to the ISBN when a search result carries no cover id

feat: add a reveal toggle to the sign-in and registration password fields

fix: space the loan badge from the due date, and style the password toggle