CommunityRule/community-rule
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Encode sign-in mail as base64 so webmail cannot mangle the verify token. #71

Merged
an.di merged 1 commits from adilallo/fix/CR-172-magic-link-base64 into main 2026-09-01 23:23:45 +00:00
Conversation 0 Commits 1 Files Changed 9
+148 -25
1 Commits
Author SHA1 Message Date
adilalloandCursor f780eac1fa Encode sign-in mail as base64 so webmail cannot mangle the verify token. 
Quoted-printable still rewrote token= as token=3D in the raw MIME, which some clients never decode. Distinguish a missing token from a real expiry, and keep links valid for 60 minutes.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-01 17:07:00 -06:00