loki5512344 c57f851a8b feat(accounts): outgoing mail over SMTP (Resend), email verification, fail-closed password reset ... - mail/ module (lettre, ru/en templates), links built only from PUBLIC_BASE_URL - migration 0006: accounts.email_verified_at, shared email_tokens table (verify + reset), existing accounts marked verified - reset mailer no longer logs tokens; RESET_MAIL_MODE=log is dev-only and refused with COOKIE_SECURE=true; Disabled by default answers 503 - forgot-password and resend-verification do their work in a background task (no timing oracle) - device linking requires a verified email; email_verified exposed via /me and gRPC - gateway rate limits, SMTP_* in compose and .env.example - frontend: verify, forgot-password, reset-password pages, verify banner, ru/en strings		2026-10-09 21:08:33 +02:00
..
accounts.proto	feat(accounts): outgoing mail over SMTP (Resend), email verification, fail-closed password reset	2026-10-09 21:08:33 +02:00