Commits

history of internal/control/loginlink.go

• store, control: resolve a login link to any verified address, not just the primary

  cmc · 2026-09-05 19:37 UTC

  success Verified · cmc d7a0d77892

• control: queue login link mail instead of a fire-and-forget goroutine

  cmc · 2026-09-05 19:36 UTC

  Verified · cmc 3dd60ce9a5

• web: a suspended account cannot mail itself a session

  cmc · 2026-09-05 04:02 UTC

  Verified · cmc cfc0bc7785

• web: close the login-link timing side channel, cover the username path

  cmc · 2026-09-05 03:44 UTC

  Verified · cmc 3f7a91e284

• web: request a login link by email

  cmc · 2026-09-05 03:35 UTC

  Verified · cmc 090dc2eb20