Repository navigation
Flowmark v0.9.0
Adds secure password recovery while keeping normal signup and sign-in free of mandatory email verification.
What's changed
- Request a reset link, choose a new password and return to the same account.
- Use hashed, single-use reset links with a 30-minute lifetime; revoke previous sessions after recovery and send a security notice.
- Handle expired/used links, throttling and uncertain network results with safe recovery guidance.
- Deliver branded mail through Resend with separate Staging/Production settings and platform-managed task lifetime.
- Protect callback redirects, caching and referrers. Password changes require the current password and sign out other sessions.
- Refresh the repository README around product value and links to detailed guides.
Verification and rollout
Deployed to all four Production applications at commit b85cfa9fa269a9ec6a0da7185fd882c04b9006cf. Required CI, PostgreSQL integration, migration-history checks and deployment/domain checks passed. Feature validation included 57 database and 109 server tests plus desktop/mobile UI checks. Production health, anonymous auth proxy and recovery-page checks passed.
No schema migration or new infrastructure setting is required. Normal account access does not require prior email verification. Real inbox and new-password sign-in acceptance remains a manual Production check; it is not claimed as completed.