Baptiste ArnaudandGitHub 03c8dd967f 🐛 Harden email login codes (#2542) ...

- Add failed-attempt tracking to verification tokens in Prisma schemas
and the PostgreSQL migration.
- Record invalid email login code attempts with an atomic counter and
retire active login tokens after five failures.
- Mark Auth.js email login verification tokens separately from other
verification-token flows.
- Use cryptographically secure random six-digit email login codes.
- Add auth package Vitest coverage, including parallel failed-attempt
handling.

2026-06-27 15:36:28 +02:00

..

migrations

🐛 Harden email login codes (#2542)

2026-06-27 15:36:28 +02:00

schema.prisma

🐛 Harden email login codes (#2542)

2026-06-27 15:36:28 +02:00