Release v0.2.0

What's Changed

This release adds Phase 2 of QuickAuth: email verification and password reset flows.

Added

• Email verification flow
• Verification token generation
• Hashed email verification token storage
• Expiring verification links
• Single-use verification tokens
• Resend verification email flow
• Forgot password page
• Password reset request flow
• Password reset completion flow
• Hashed password reset token storage
• Expiring password reset links
• Single-use password reset tokens
• Session revocation after password reset
• Email helper setup for transactional auth emails
• Environment variables for app URL and email configuration

Security Improvements

• Raw verification tokens are only sent through email links
• Raw password reset tokens are only sent through email links
• Verification and reset tokens are stored as hashes in the database
• Password reset responses avoid revealing whether an email exists
• Password reset invalidates existing sessions
• Token expiration and single-use behavior reduce replay risk

Testing

Recommended checks:

npx prisma validate
npm run build
npm run dev

Changelog