docs: plan note for Mantine design pass
This commit is contained in:
parent
38d4899b07
commit
85c5a8381c
1 changed files with 3 additions and 1 deletions
|
|
@ -114,7 +114,9 @@ localStorage manager + toggle + inline `ColorSchemeScript` equivalent.
|
|||
RJSF swap was import-only; SSR smoke test proved all 10 intake labels +
|
||||
textarea/password/checkbox/slider widgets render. `npm run build` green.
|
||||
|
||||
## 1. Locked decisions (do not re-ask)* Auth: SMTP magic-link, 15-min single-use tokens (`secrets.token_urlsafe`,
|
||||
## 1. Locked decisions (do not re-ask)
|
||||
|
||||
* Auth: SMTP magic-link, 15-min single-use tokens (`secrets.token_urlsafe`,
|
||||
store `sha256`, `used_at` set before session creation), session = opaque id
|
||||
in **DB table**, cookie `HttpOnly; Secure; SameSite=Lax; Path=/`.
|
||||
SMTP creds already in `.env` (`SMTP_HOST/PORT/USERNAME/PASSWORD`,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue