Marcel 611b82ccde refactor(user): migrate UserController to @RequiredArgsConstructor + final fields ...

The circular-dependency that originally forced @AllArgsConstructor was
removed when changePassword orchestration moved into the controller.
No cycle now exists between UserController, UserService, AuthService,
or AuditService — final fields and constructor injection are safe again.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 09:23:01 +02:00

..

java/org/raddatz/familienarchiv

refactor(user): migrate UserController to @RequiredArgsConstructor + final fields

2026-05-19 09:23:01 +02:00

resources

feat(auth): add Bucket4j + Caffeine login rate limiter (10/15 min per IP+email, 20/15 min per IP)

2026-05-19 09:23:01 +02:00