adilalloandCursor f780eac1fa Encode sign-in mail as base64 so webmail cannot mangle the verify token. ...

Quoted-printable still rewrote token= as token=3D in the raw MIME, which some clients never decode. Distinguish a missing token from a real expiry, and keep links valid for 60 minutes.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-01 17:07:00 -06:00

..

route.ts

Encode sign-in mail as base64 so webmail cannot mangle the verify token.

2026-09-01 17:07:00 -06:00