Skip to content

hdtilt 0.2.2: confirmation links work once

Choose a tag to compare

@ralyodio ralyodio released this 09 Oct 23:26
7d9344e
  • Security: a used email confirmation link no longer signs anyone in after a server restart. It now uses @profullstack/auth-system 0.8.3, which keeps used and revoked tokens in the database.
  • Confirming your email now lands on a clear "Email confirmed" screen.
  • Clicking the link again says the email is already confirmed and asks you to sign in.