2 Commits

Include renames

Author	SHA1	Message	Date
adilalloandCursor	f780eac1fa	Encode sign-in mail as base64 so webmail cannot mangle the verify token. ... Quoted-printable still rewrote token= as token=3D in the raw MIME, which some clients never decode. Distinguish a missing token from a real expiry, and keep links valid for 60 minutes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 17:07:00 -06:00
adilalloandCursor	d920e39f09	Send sign-in mail as HTML so quoted-printable wrapping cannot break the verify URL. ... Staging was delivering magic links that looked expired because the token query string was encoded and wrapped in plaintext MIME. Also read rate-limit retry from the API error body, mention spam in the success copy, and document SES relay DNS. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-01 10:01:25 -06:00