Skip to content

Conversation

@marcodejongh
Copy link
Owner

No description provided.

marcodejongh and others added 9 commits January 4, 2026 22:15
… docs

- Merge PR 529 OAuth implementation (Google, Apple, Facebook providers)
- Fix inline styles in auth-page-content.tsx to use design tokens
- Expand oauth-setup.md with:
  - Architecture overview diagram
  - Prerequisites section
  - Environment variables reference tables
  - Step-by-step provider setup (Google, Apple, Facebook)
  - Email verification setup for multiple SMTP providers
  - Testing procedures
  - Production deployment checklist
  - Comprehensive troubleshooting guide
Existing users who registered before email verification was required
have emailVerified set to NULL. This migration sets their emailVerified
to their created_at timestamp, allowing them to continue logging in
with the new email verification checks.
Security improvements:
- Remove userId from registration response to prevent info disclosure
- Add rate limiting to verify-email endpoint (20 req/min per IP)
- Handle TooManyAttempts error in verification UI

UX improvements:
- Reduce timing attack delay from 2.5s to 1.5s
- Use Ant Design icon prop for social buttons (better alignment)
- Remove unnecessary inline styles from social login buttons
- verify-email: Wrap user update + token delete in transaction
- resend-verification: Wrap token delete + insert in transaction
- register: Mark OAuth users as verified when adding password
- register: Use transaction for OAuth password linking
- social-login-buttons: Show single skeleton to minimize layout shift
@vercel
Copy link

vercel bot commented Jan 5, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
boardsesh Error Error Jan 5, 2026 1:10am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants