Skip to content

docs: auth email, sessions, and rate limits - #21

Draft
cursor[bot] wants to merge 1 commit into
feat/auth-foundationfrom
cursor/engineering-documentation-updates-5738
Draft

cursor[bot] wants to merge 1 commit into
feat/auth-foundationfrom
cursor/engineering-documentation-updates-5738

Conversation

@cursor

@cursor cursor Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

Summary

Documentation-only follow-up to feat/auth-foundation (PR #12).

Docs added/updated

File Change
docs/architecture.md New Authentication and sessions section; decision log entry for 2026-09-10 auth work
docs/self-host.md SMTP setup runbook for verification and password reset
docs/README.md Map entry + reconciliation date
README.md Config table: SMTP_URL / SMTP_FROM vs push
docs/plans/user-journey-audit-2026-09-10.md Pointer to architecture for as-built auth

Codepaths covered

  • packages/auth (Better Auth, verification, reset, rate limit pin)
  • packages/adapter-kit / packages/adapters (EmailSender, SMTP)
  • apps/api (/api/auth/*, CORS, managed-AI rate limit, bearer → cookie)
  • apps/web (/reset-password)

Gaps addressed

  • No canonical doc for auth topology, mobile bearer transport, or SMTP degradation
  • Operator runbook missing SMTP requirements for account recovery
  • Audit plan doc still read as source of truth for auth behavior

Known gap (documented honestly)

Per-action emailVerified gates are not wired in the oRPC router yet.

Open in Web View Automation 

Align architecture, self-host, and README with the auth foundation
(SMTP adapter, verification, password reset, Better Auth and managed-AI
rate limiting). Point the user-journey audit at architecture.md for as-built behavior.

Co-Authored-By: Cursor <noreply@cursor.com>

Co-authored-by: drferdiiskandar <drferdiiskandar@sentrahai.com>
@vercel

vercel Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sentrabot-site Ready Ready Preview Oct 7, 2026 6:42am UTC

Request Review

This branch was successfully deployed

1 active deployment
Preview — 04f1838d Deployed Oct 7, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant