Improve log_account endpoint validation

gandalf_automationrequested to merge
improve-log-account-validation into develop

Summary

  • Add CSRF header validation to /api/auth/log_account endpoint to align with other auth endpoints
  • Add username format validation before processing

Changes

  • Import and call checkCsrfHeader for request validation
  • Add isSafeForLogging() helper to validate username format
  • Return 400 error for malformed usernames

Test Plan

  • Verify normal login/logout flows still work
  • Verify malformed username returns 400 error

Merge request reports