Skip to content

fix(auth): enforce email verification and fix password recovery flow - #21

Open
Methasit-Pun wants to merge 3 commits into
mainfrom
refactor
Open

Methasit-Pun wants to merge 3 commits into
mainfrom
refactor

Conversation

@Methasit-Pun

Copy link
Copy Markdown
Owner

No description provided.

- Gate reset-password form behind PASSWORD_RECOVERY event by exchanging
  the recovery code client-side instead of server-side, so a regular
  logged-in user cannot reach the reset form directly
- Replace register-success auto-redirect with an email verification gate
  so users must confirm their email before accessing the app
- Fix Remember Me to use localStorage instead of sessionStorage so the
  session actually persists across browser restarts
- Replace all hardcoded production URLs with requestUrl.origin / window.location.origin
  so email links work in dev and staging environments
- Remove user profile data from localStorage (XSS exposure)
- Remove setTimeout(1000) DB trigger hack in register flow
- Move Supabase client to module level across all auth pages
- Remove dead LineLoginButton import and all debug console.log statements
- Fix catchLookupError: any → unknown in login handler
@vercel

vercel Bot commented May 31, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
intania-room-reservation Ready Ready Preview, Comment, Open in v0 May 31, 2026 1:28am

@Methasit-Pun Methasit-Pun linked an issue May 31, 2026 that may be closed by this pull request

This branch was successfully deployed

1 active deployment
Preview — 370d62da Deployed May 31, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Forgot Password Issue with supabase authen redirect to local

1 participant