Send magic-link mail as base64 so the raw MIME never contains token=3D.
Put the full verify URL in the text body and as a visible HTML link.
Keep links valid for 60 minutes. Show “not valid” for a missing token and “expired” only when the row is actually past expiry.
Cloudron manifest 0.1.13 (already on staging).
Test plan
Request a new magic link on staging and sign in from the new email (not an old one).
Prefer a non-Gmail inbox (May First / university webmail).
If it fails, note whether the banner says expired or not valid.
## Summary
- Send magic-link mail as base64 so the raw MIME never contains `token=3D`.
- Put the full verify URL in the text body and as a visible HTML link.
- Keep links valid for 60 minutes. Show “not valid” for a missing token and “expired” only when the row is actually past expiry.
- Cloudron manifest `0.1.13` (already on staging).
## Test plan
- [ ] Request a new magic link on staging and sign in from the new email (not an old one).
- [ ] Prefer a non-Gmail inbox (May First / university webmail).
- [ ] If it fails, note whether the banner says expired or not valid.
an.di
self-assigned this 2026-09-01 23:23:37 +00:00
Quoted-printable still rewrote token= as token=3D in the raw MIME, which some clients never decode. Distinguish a missing token from a real expiry, and keep links valid for 60 minutes.
Co-authored-by: Cursor <cursoragent@cursor.com>
an.di
merged commit df7051f33a into main2026-09-01 23:23:45 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
token=3D.0.1.13(already on staging).Test plan