ghost d0883f9018 fix(auth): hash MFA backup codes (#1629) ...

* fix(auth): hash MFA backup codes

* fix(auth): lock and filter backup code verification

* test(auth): assert consumed backup code digest

* fix(auth): strengthen backup code handling

* fix(auth): require otp secret before mfa enable

* test(auth): assert backup code digest consumption

* fix(auth): rehash legacy MFA backup codes

* fix(auth): narrow legacy backup code migration

2026-05-05 01:20:57 +02:00

..

admin

Administer invitations in /admin/users (#1185)

2026-03-14 11:32:33 +01:00

api/v1

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

category

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

concerns

feat(api): expose securities and price history (#1642)

2026-05-05 01:08:43 +02:00

import

QIF imports: Add date format auto-detection and manual override (#1368)

2026-04-05 09:27:24 +02:00

settings

feat(auth): add WebAuthn MFA credentials (#1628)

2026-05-03 22:13:28 +02:00

tag

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

transactions

Added ability to bulk-edit transaction names for multiple selected transactions (#1553)

2026-04-29 18:35:00 +02:00

account_sharings_controller.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

accountable_sparklines_controller.rb

Add CoinStats exchange portfolio sync and normalize linked investment charts (#1308)

2026-04-01 20:25:06 +02:00

accounts_controller.rb

Add Sophtron Provider (#596)

2026-04-19 11:16:04 +02:00

application_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

archived_exports_controller.rb

Add post-trial inactive Family cleanup with data archival (#1199)

2026-03-14 20:14:18 +01:00

binance_items_controller.rb

Add Binance support, heavily inspired by the Coinbase one (#1317)

2026-04-07 14:43:17 +02:00

budget_categories_controller.rb

fix(budgets): stop auto-matched transfers leaking into category cards (#1059) (#1588)

2026-05-01 00:59:48 +02:00

budgets_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

categories_controller.rb

Make categories global (#1160)

2026-03-11 15:54:01 +01:00

chats_controller.rb

fix(chat): eager pending AssistantMessage to fix Turbo subscribe race (#1657) (#1658)

2026-05-03 20:33:29 +02:00

coinbase_items_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

coinstats_items_controller.rb

Add CoinStats exchange portfolio sync and normalize linked investment charts (#1308)

2026-04-01 20:25:06 +02:00

cookie_sessions_controller.rb

Improve account sync performance, handle concurrent market data syncing (#2236)

2025-05-15 10:19:56 -04:00

credit_cards_controller.rb

Account Activity View + Account Forms (#1406)

2024-11-04 20:27:31 -05:00

cryptos_controller.rb

Fix crypto subtype for trades api (#1022)

2026-02-19 19:51:42 +01:00

currencies_controller.rb

…

current_sessions_controller.rb

Improve account sync performance, handle concurrent market data syncing (#2236)

2025-05-15 10:19:56 -04:00

depositories_controller.rb

Account Activity View + Account Forms (#1406)

2024-11-04 20:27:31 -05:00

email_confirmations_controller.rb

Allow users to update their email address (#1745)

2025-01-31 11:29:49 -06:00

enable_banking_items_controller.rb

feat(enable-banking): enhance transaction import, metadata handling, and UI (#1406)

2026-04-10 23:19:48 +02:00

exchange_rates_controller.rb

Add exchange rate feature with multi-currency transactions and transfers support (#1099)

2026-04-08 21:05:58 +02:00

family_exports_controller.rb

Fix export polling missing template error (#796) (#721)

2026-02-25 17:09:51 -05:00

family_merchants_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

holdings_controller.rb

Expand financial providers (#1407)

2026-04-09 18:33:59 +02:00

impersonation_sessions_controller.rb

…

imports_controller.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

indexa_capital_items_controller.rb

Fix IndexaCapital sync, account setup, and balance/type bugs (#1562)

2026-04-27 18:33:22 +02:00

investments_controller.rb

Fix Investment account subtype not saving on creation (#1039)

2026-02-23 17:47:49 -05:00

invitations_controller.rb

Fix OIDC household invitation (issue #900) (#904)

2026-02-06 16:14:42 +01:00

invite_codes_controller.rb

Add default family selection for invite-only onboarding mode (#1174)

2026-03-10 18:12:53 +01:00

loans_controller.rb

Fix loan account subtype not persisting on create (#1491)

2026-04-18 00:06:24 +02:00

lookbooks_controller.rb

Pre-launch design sync with Figma spec (#2154)

2025-04-30 18:14:22 -04:00

lunchflow_items_controller.rb

Missing translation fallback for account subtypes (#1325)

2026-03-31 17:22:49 +02:00

mcp_controller.rb

Add MCP server endpoint for external AI assistants (#1051)

2026-02-23 09:13:15 -05:00

mercury_items_controller.rb

fix(mercury): support named multiple API connections (#1627)

2026-05-03 10:56:31 +02:00

messages_controller.rb

Fix "Messages is invalid" error for Ollama/custom LLM providers and add comprehensive AI documentation (#225)

2025-10-24 12:04:19 +02:00

mfa_controller.rb

fix(auth): hash MFA backup codes (#1629)

2026-05-05 01:20:57 +02:00

oidc_accounts_controller.rb

Check for pending invitations before creating new Family during SSO log in/sign up (#1171)

2026-03-10 13:38:42 +01:00

onboardings_controller.rb

Onboarding redirect tests and trial status bar (#2197)

2025-05-02 15:21:46 -04:00

other_assets_controller.rb

Account Activity View + Account Forms (#1406)

2024-11-04 20:27:31 -05:00

other_liabilities_controller.rb

Account Activity View + Account Forms (#1406)

2024-11-04 20:27:31 -05:00

pages_controller.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

password_resets_controller.rb

Add security measures for SSO-only users: block password resets, enforce SSO authentication, and refactor validations for JIT provisioning. (#569)

2026-01-07 20:17:23 +01:00

passwords_controller.rb

…

pending_duplicate_merges_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

plaid_items_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

properties_controller.rb

fix: currency being ignored for properties (#1556)

2026-04-29 13:47:32 +02:00

recurring_transactions_controller.rb

Recurring scoping implementation (#1300)

2026-03-26 19:01:35 +01:00

registrations_controller.rb

Fix invite code being consumed on failed registration in invite-only mode (#1576)

2026-04-29 18:54:23 +02:00

reports_controller.rb

Investments currency fix (#1436)

2026-04-11 15:09:59 +02:00

rules_controller.rb

fix: Handle empty compound conditions on rules index (#965)

2026-02-13 19:53:24 +01:00

securities_controller.rb

Improve convert-to-trade security selection with search-first UX (#703)

2026-01-19 15:49:51 +01:00

sessions_controller.rb

Check for pending invitations before creating new Family during SSO log in/sign up (#1171)

2026-03-10 13:38:42 +01:00

simplefin_items_controller.rb

SimpleFIN: setup UX + same-provider relink + card-replacement detection (#1493)

2026-04-18 09:50:34 +02:00

snaptrade_items_controller.rb

fix: send first-time SnapTrade users to connect flow (#1613)

2026-05-03 10:28:31 +02:00

sophtron_items_controller.rb

Add Sophtron Provider (#596)

2026-04-19 11:16:04 +02:00

splits_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

subscriptions_controller.rb

Hide contribution payments from demo user(s) (#738)

2026-01-23 12:35:49 +01:00

tags_controller.rb

Add ability to delete all tags (#2200)

2025-05-05 12:43:46 -04:00

trades_controller.rb

Record dividends and interest as Trades in investment accounts (#1311)

2026-03-29 10:08:54 +02:00

transaction_attachments_controller.rb

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

transaction_categories_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

transactions_controller.rb

fix: Enable and persist notes and tags on split child transactions (#1535) (#1552)

2026-04-29 18:17:36 +02:00

transfer_matches_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

transfers_controller.rb

fix(transfers): Set accounts when rendering new form after conversion or argument errors (#1561)

2026-04-27 15:10:27 +02:00

users_controller.rb

feat: add currency management for families with enabled currencies (#1419)

2026-04-13 19:53:04 +02:00

valuations_controller.rb

Providers sharing (#1273)

2026-03-25 17:47:04 +01:00

vehicles_controller.rb

Account Activity View + Account Forms (#1406)

2024-11-04 20:27:31 -05:00

webhooks_controller.rb

security: sanitize exception messages in v1 API responses (FIX-11) (#1521)

2026-04-19 18:38:23 +02:00