mixandClaude Opus 5.5 b7bbb2ca14 guard: routes - the reset link, the confirmation link, Send the link again ...

password-reset, agreed 2026-10-13 ("the e-mail must be confirmed") and
settled 2026-10-17 ("Без подтверждения слать": notifications go to an
unconfirmed address, a reset link only to a confirmed one); mockups
2f5f5b2.

Public, as /setup/ is: /login/reset (the form that asks for a link),
/login/reset/<token> (the new password from the link), /confirm/<token>
(the address confirmed from its link) - each link is opened from a mail,
signed in or not. Behind a session: POST /account/email/confirm, Send the
link again on Account.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 11:02:34 +03:00

..

auth

health-setup-checks: the certificate's name, Postfix's greeting, the proxy

2026-10-16 23:51:42 +03:00

handlers

docs-audit: the guide and the panel's words against the code

2026-10-17 02:32:44 +03:00

validate

docs-audit: architecture, schema, security and the rest against the code

2026-10-17 02:07:55 +03:00

view

docs-audit: the guide and the panel's words against the code

2026-10-17 02:32:44 +03:00

guard_routes_test.go

guard: routes - the reset link, the confirmation link, Send the link again

2026-10-17 11:02:34 +03:00

handlers_license_test.go

release: 1.1.0: Domain-admin role and internal/web package split

2026-09-22 15:24:52 +03:00

home_test.go

audit 6: documents, comments, dead code and staticcheck; the test gaps closed

2026-10-15 14:41:26 +03:00

security_test.go

origin-strict: a change with neither Sec-Fetch-Site nor Origin is refused

2026-10-16 23:16:27 +03:00

security.go

origin-strict: a change with neither Sec-Fetch-Site nor Origin is refused

2026-10-16 23:16:27 +03:00

web.go

local-time: the panel in the container's zone, named on Settings

2026-10-17 01:34:28 +03:00