feat(auth): refuse login for disabled accounts, and stop leaking which exist (#8074) - #8075

Merged

renemadsen merged 3 commits into

feat/8074-refuse-login-for-disabled-accounts

Sep 17, 2026

Commits on Sep 17, 2026

feat(auth): refuse login for disabled accounts, and stop leaking which exist (#8074)

renemadsen
and
claude
committed
9cdca96
fix(auth): collapse the lockout message too, and check IsActive after the password (#8074)

renemadsen
and
claude
committed
54f7241
style(auth): brace the new guards and reword a comment Sonar read as code (#8074)

renemadsen
and
claude
committed
cf70291