Tree: 4015c4da30

cached-config-operations

main

revert-7033-patch-1

test_dylint

v2-followups

v2-registration

0.10.0

0.11.0

0.12.0

0.13.0

0.9.0

1.0.0

1.1.0

1.10.0

1.11.0

1.12.0

1.13.0

1.13.1

1.14

1.14.1

1.14.2

1.15.0

1.15.1

1.16.0

1.16.1

1.16.2

1.16.3

1.17.0

1.18.0

1.19.0

1.2.0

1.20.0

1.21.0

1.22.0

1.22.1

1.22.2

1.23.0

1.23.1

1.24.0

1.25.0

1.25.1

1.25.2

1.26.0

1.27.0

1.28.0

1.28.1

1.29.0

1.29.1

1.29.2

1.3.0

1.30.0

1.30.1

1.30.2

1.30.3

1.30.4

1.30.5

1.31.0

1.32.0

1.32.1

1.32.2

1.32.3

1.32.4

1.32.5

1.32.6

1.32.7

1.33.0

1.33.1

1.33.2

1.34.0

1.34.1

1.34.2

1.34.3

1.35.0

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.35.7

1.35.8

1.36.0

1.37.0

1.37.1

1.37.2

1.37.3

1.37.4

1.37.5

1.4.0

1.5.0

1.6.0

1.6.1

1.7.0

1.8.0

1.9.0

1.9.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '4015c4da30'

${ noResults }

Commit Graph

1 Commits (4015c4da30d558ffa9c63ec1100e2be1fea9cc0b)

Author	SHA1	Message	Date
ICantThinkOfAName-tech	c46c22139b	Add email verification for Sends Allow Sends to be restricted to a list of email addresses. Recipients request a one-time code by email through the `send_access` grant and exchange it for an access token, matching the upstream flow. - Store `auth_type` and `emails` on sends, with an additive migration - One-time codes: single use, constant-time compared, invalidated after 5 wrong attempts, 60s resend cooldown, 5 minute validity - Unlisted emails get the same response as listed ones and no email is sent, so recipients can't be enumerated - Access is gated on the stored auth type and fails closed when a Send doesn't hold the emails or password its auth type requires - Shared create/update handling of authType; it is inferred when missing, like upstream, for clients that don't send it Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	4 weeks ago