Fix password reset security: user enumeration, weak tokens, plaintext storage, missing TTL#2961

Draft

Copilot wants to merge 3 commits into4.1from

copilot/improve-password-reset-security

Commits on Jan 29, 2026

Initial plan
Copilot
committed
Fix password reset security issues: user enumeration, weak tokens, plaintext storage, and missing TTL

Copilot
and
dpfaffenbauer
committed
Address code review feedback: token format validation, TTL validation, immutable datetime handling

Copilot
and
dpfaffenbauer
committed