Poweradmin\Application\Controller\Auth

Handles the change-password form for the logged-in user; LDAP, OIDC and SAML users are refused.

Handles the forgot-password form: takes an email address and sends the password reset link.

Handles the forgot-username form: sends the username to the submitted email address if it is on file.

Renders the login page with its CSRF token and the enabled OIDC and SAML providers.

Logs the user out, clearing the session and redirecting to the OIDC or SAML provider's logout when used.

Handles the MFA setup page: app or email enrolment, verification, disabling and recovery code regeneration.

Handles the MFA verification step after login, with throttling of failed attempts.

Handles the OIDC provider callback at /oidc/callback: completes the login or reports the provider error.

Starts the OIDC login flow by redirecting to the chosen or first configured provider.

"Continue as" on the login page: lifts the signed-out mark set at logout so the next page signs the web server's user in again.

Handles the password reset form reached from the emailed token link and sets the new password.

Handles the SAML assertion (/saml/acs) and single logout (/saml/sls) endpoints.

Starts the SAML login flow by redirecting to the chosen or first configured identity provider.

Serves the SAML service provider metadata XML at /saml/metadata.

Handles the user agreement page: shows the text and records the user's acceptance.