Repository navigation
hdtilt 0.2.2: confirmation links work once
- Security: a used email confirmation link no longer signs anyone in after a server restart. It now uses @profullstack/auth-system 0.8.3, which keeps used and revoked tokens in the database.
- Confirming your email now lands on a clear "Email confirmed" screen.
- Clicking the link again says the email is already confirmed and asks you to sign in.