v0.2.1

0.2.1 (2026-10-25)

Highlights

LoginTokenService gains request_id_for_link(link_token), which returns the request id a login link belongs to without redeeming the link. This lets web apps auto-login when the requesting browser opens the link while keeping single-use links safe from mail scanners; the lookup is read-only and returns None for unknown, redeemed, or expired links.

Bug Fixes

• Let web apps look up a login link's request without redeeming it (#13) (5b8fe6d)