docs: plan note for Mantine design pass

This commit is contained in:
Jonas Miederer 2026-09-12 08:39:23 +02:00
parent 38d4899b07
commit 85c5a8381c

View file

@ -114,7 +114,9 @@ localStorage manager + toggle + inline `ColorSchemeScript` equivalent.
RJSF swap was import-only; SSR smoke test proved all 10 intake labels +
textarea/password/checkbox/slider widgets render. `npm run build` green.
## 1. Locked decisions (do not re-ask)* Auth: SMTP magic-link, 15-min single-use tokens (`secrets.token_urlsafe`,
## 1. Locked decisions (do not re-ask)
* Auth: SMTP magic-link, 15-min single-use tokens (`secrets.token_urlsafe`,
store `sha256`, `used_at` set before session creation), session = opaque id
in **DB table**, cookie `HttpOnly; Secure; SameSite=Lax; Path=/`.
SMTP creds already in `.env` (`SMTP_HOST/PORT/USERNAME/PASSWORD`,