thecrealm/mokuroku
1
0
Fork 0
Code Issues 4 Pull requests Projects Releases Packages 6 Wiki Activity Actions

Implement accounts, sessions, and email verification #3

New issue
Closed
opened 2026-07-19 23:26:30 +02:00 by thecrealm · 1 comment
thecrealm commented 2026-07-19 23:26:30 +02:00
Owner
Copy link

Acceptance: §4.1 (registration, email verification before contributing, sessions, suspension), §12.5 (credential storage, session security), §7.4 (unverified-account purge, session expiry).

Acceptance: §4.1 (registration, email verification before contributing, sessions, suspension), §12.5 (credential storage, session security), §7.4 (unverified-account purge, session expiry).
thecrealm added
now
 and removed
next
 labels 2026-07-20 14:51:09 +02:00
thecrealm commented 2026-07-20 15:30:36 +02:00
Author
Owner
Copy link

Live on prod (c887981): open registration with field-error validation, verify-before-contributing gate, Argon2id credentials (password4j, OWASP params), server-side sessions (hashed tokens, HttpOnly/Secure/SameSite=Lax, idle+absolute expiry), suspension enforcement, self-service password/email change, §7.4 retention purger. 13 behavioural tests green locally (zonky) and in CI (postgres:18 service, D14). Full register→verify→login→me flow smoke-tested on prod and cleaned up. Decisions D10-D14; SMTP follow-up tracked as #13 (M4).

Live on prod (c887981): open registration with field-error validation, verify-before-contributing gate, Argon2id credentials (password4j, OWASP params), server-side sessions (hashed tokens, HttpOnly/Secure/SameSite=Lax, idle+absolute expiry), suspension enforcement, self-service password/email change, §7.4 retention purger. 13 behavioural tests green locally (zonky) and in CI (postgres:18 service, D14). Full register→verify→login→me flow smoke-tested on prod and cleaned up. Decisions D10-D14; SMTP follow-up tracked as #13 (M4).
thecrealm 2026-07-20 15:30:36 +02:00
  • closed this issue
  • removed the
    now
         label
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
spec-v1
Labels
Clear labels   
M0
Milestone M0 — Foundation

  
M1
Milestone M1 — Community mechanics

  
M2
Milestone M2 — Ingestion & reconciliation

  
M3
Milestone M3 — Consumer layer

  
M4
Milestone M4 — Launch readiness

  
M5
Milestone M5 — Anime rollout

  
blocked
Cannot proceed; blocker named in a comment

  
next
Queued next

  
now
Being worked right now

No labels
M0
M1
M2
M3
M4
M5
blocked
next
now
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
thecrealm/mokuroku#3
No description provided.