Release v0.2.1

pre

Release v0.2.0

What's Changed

This release adds Phase 2 of QuickAuth: email verification and password reset flows.

Added

• Email verification flow
• Verification token generation
• Hashed email verification token storage
• Expiring verification links
• Single-use verification tokens
• Resend verification email flow
• Forgot password page
• Password reset request flow
• Password reset completion flow
• Hashed password reset token storage
• Expiring password reset links
• Single-use password reset tokens
• Session revocation after password reset
• Email helper setup for transactional auth emails
• Environment variables for app URL and email configuration

Security Improvements

• Raw verification tokens are only sent through email links
• Raw password reset tokens are only sent through email links
• Verification and reset tokens are stored as hashes in the database
• Password reset responses avoid revealing whether an email exists
• Password reset invalidates existing sessions
• Token expiration and single-use behavior reduce replay risk

Testing

Recommended checks:

npx prisma validate
npm run build
npm run dev

Changelog

Release v0.1.1

What's Changed

• Completed Version 1 auth foundation
• Added signup and login
• Added Argon2id password hashing
• Added database-backed sessions
• Added HTTP-only session cookies
• Added protected dashboard route
• Added Prisma models for User, Profile, and Session

Testing

• npx prisma validate
• npm run build
• Manual signup/login/logout test

Changelog