LatestMay 2026
Forgot-password flow + smarter signup
- ›New `/auth/login/forgot-password` and `/auth/login/reset-password` pages with email-OTP reset codes.
- ›Login now offers an inline “Verify your email” panel when an unverified user tries to sign in.
- ›Signup with an already-registered email shows actionable buttons: Sign in, or reset password.
- ›Audit-log rows for `AUTH_PASSWORD_RESET_REQUESTED` and `AUTH_PASSWORD_RESET`.