Repository navigation
feat(auth): email verification, password reset, rate limiting, and or… - #12
Merged
Merged
Conversation
…igin hardening Mirror the capsule at Monorepo commit d90a3f0f963ac4ab26cdae470b3d721a58f5bb4e into the standalone repo: provider-neutral SMTP email seam, better-auth email verification + password reset wiring, explicit rate limiting (auth endpoints + managed-AI route), production-gated CORS/trusted-origin hardening, matching web UI (forgot-password, reset-password page, Indonesian catalog), and the product/user-journey audit this work was scoped from. Plus accumulated capsule drift since the last sync (executor/child-bots/phone/onboarding/approval fixes, bot-avatar rework, locale updates). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub. 1 Skipped Deployment
|
Owner
Author
|
Danke |
Owner
Author
|
conflicts resolved |
Prefer main for marketing site assets, LFS gitattributes, and README. Keep auth feature branch package changes. Co-Authored-By: Cursor <cursoragent@cursor.com> Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
Postgres journey suites signup many users from one IP and hit 429 once rateLimit.enabled defaults to true. Keep the limiter on outside Vitest. Co-Authored-By: Cursor <cursoragent@cursor.com> Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
…solve Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
E2E createApp runs outside Vitest, so AUTH_RATE_LIMIT_ENABLED=false is required in the harness. Match Indonesian signup policy error strings. Co-Authored-By: Cursor <cursoragent@cursor.com> Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
Co-Authored-By: Cursor <cursoragent@cursor.com> Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
This was referenced Oct 7, 2026
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
…igin hardening
Mirror the capsule at Monorepo commit d90a3f0f963ac4ab26cdae470b3d721a58f5bb4e into the standalone repo: provider-neutral SMTP email seam, better-auth email verification + password reset wiring, explicit rate limiting (auth endpoints + managed-AI route), production-gated CORS/trusted-origin hardening, matching web UI (forgot-password, reset-password page, Indonesian catalog), and the product/user-journey audit this work was scoped from. Plus accumulated capsule drift since the last sync (executor/child-bots/phone/onboarding/approval fixes, bot-avatar rework, locale updates).