NOTE: Password and account recovery used to live here as the public, unauthenticated handlers handleResetPassword / handleResetAccount. They were removed because an unauthenticated recovery endpoint is a remotely exploitable auth-bypass on any public-facing deployment: the confirm phrase was embedde
(userID string, lang string)
| 212 | |
| 213 | // initUserDefaultConfigs Initialize default configs for new user |
| 214 | func (s *Server) initUserDefaultConfigs(userID string, lang string) error { |
| 215 | if err := s.createDefaultStrategies(userID, lang); err != nil { |
| 216 | logger.Warnf("Failed to create default strategies for user %s: %v", userID, err) |
| 217 | // Non-fatal: user can create strategies manually |
| 218 | } |
| 219 | logger.Infof("✓ User %s registration completed with default strategies", userID) |
| 220 | return nil |
| 221 | } |
| 222 | |
| 223 | func (s *Server) createDefaultStrategies(userID string, lang string) error { |
| 224 | type strategyI18n struct { |
no test coverage detected