feat(auth): email verification with magic-link auto-login#46

Open

Dandiggas wants to merge 15 commits into

mainfrom

feature/email-verification-magic-link

Commits on Apr 20, 2026

feat(auth): grandfather existing users' EmailAddress rows

Dandiggas
and
claude
committed
harden(auth): defend grandfather migration against prod edge cases

Dandiggas
and
claude
committed
feat(auth): add CustomAccountAdapter routing confirm URLs to frontend

Dandiggas
and
claude
committed
feat(auth): enable mandatory email verification + SendGrid SMTP (gated)

Dandiggas
and
claude
committed
feat(auth): add verify-and-login endpoint for magic-link auto-login

Dandiggas
and
claude
committed
test(auth): cover HMAC-expired verify-and-login path

Dandiggas
and
claude
committed
feat(auth): override allauth email-confirmation templates

Dandiggas
and
claude
committed
docs(auth): document email-verification env vars in .env.example

Dandiggas
and
claude
committed
feat(auth): add /auth/check-email post-register screen

Dandiggas
and
claude
committed
feat(auth): add /auth/verify/[key] callback page with auto-login

Dandiggas
and
claude
committed
feat(auth): redirect to /auth/check-email after register

Dandiggas
and
claude
committed
feat(auth): detect unverified-email on login + auto-resend once

Dandiggas
and
claude
committed
harden(auth): gate login auto-resend on email-shaped username

Dandiggas
and
claude
committed
harden(auth): set email subject prefix + normalize legacy user.email

Dandiggas
and
claude
committed

Commits on Apr 21, 2026

harden(auth): trim whitespace on verify key before POST

Dandiggas
and
claude
committed