LoVisual

boba/LoVisual

Fork 0

Commit graph

Author	SHA1	Message	Date
loki5512344	cc33b6e4fc	feat(mail): redesigned transactional emails (banner, bulletproof button, copyable link, preheader, ru/en) with tests Some checks failed CI / backend (cargo test + clippy) (push) Failing after 1s Details CI / frontend (lint + test + build) (push) Failing after 1m25s Details CI / mod (gradle test + checkFolderLimit) (push) Successful in 5m7s Details	2026-10-09 21:52:46 +02:00
loki5512344	c57f851a8b	feat(accounts): outgoing mail over SMTP (Resend), email verification, fail-closed password reset - mail/ module (lettre, ru/en templates), links built only from PUBLIC_BASE_URL - migration 0006: accounts.email_verified_at, shared email_tokens table (verify + reset), existing accounts marked verified - reset mailer no longer logs tokens; RESET_MAIL_MODE=log is dev-only and refused with COOKIE_SECURE=true; Disabled by default answers 503 - forgot-password and resend-verification do their work in a background task (no timing oracle) - device linking requires a verified email; email_verified exposed via /me and gRPC - gateway rate limits, SMTP_* in compose and .env.example - frontend: verify, forgot-password, reset-password pages, verify banner, ru/en strings	2026-10-09 21:08:33 +02:00

Author

SHA1

Message

Date

loki5512344

cc33b6e4fc

feat(mail): redesigned transactional emails (banner, bulletproof button, copyable link, preheader, ru/en) with tests

CI / backend (cargo test + clippy) (push) Failing after 1s

Details

CI / frontend (lint + test + build) (push) Failing after 1m25s

Details

CI / mod (gradle test + checkFolderLimit) (push) Successful in 5m7s

Details

2026-10-09 21:52:46 +02:00

loki5512344

c57f851a8b

feat(accounts): outgoing mail over SMTP (Resend), email verification, fail-closed password reset

- mail/ module (lettre, ru/en templates), links built only from PUBLIC_BASE_URL
- migration 0006: accounts.email_verified_at, shared email_tokens table (verify + reset), existing accounts marked verified
- reset mailer no longer logs tokens; RESET_MAIL_MODE=log is dev-only and refused with COOKIE_SECURE=true; Disabled by default answers 503
- forgot-password and resend-verification do their work in a background task (no timing oracle)
- device linking requires a verified email; email_verified exposed via /me and gRPC
- gateway rate limits, SMTP_* in compose and .env.example
- frontend: verify, forgot-password, reset-password pages, verify banner, ru/en strings

2026-10-09 21:08:33 +02:00

2 commits