aneurinandClaude Sonnet 5
f9b65cc4a7
Backend - New Mail namespace: a Mailer interface with SMTP (phpmailer), PHP mail() (the default fallback), and log-to-file transports, selected by MAIL_TRANSPORT. EmailVerifier issues a hashed, 15-minute magic-link token and sends the link (APP_URL/verify-email?token=...). - Migration 005: email_verifications table + users.verification_email_sent_at. - Registration now emails a verification link (best effort — a send failure doesn't fail registration). - POST /api/auth/verify-email consumes a token and returns a session, so opening the link verifies the address (or applies a pending email change) and logs the user in. Single-use; distinct 400s for invalid/used/expired. - POST /api/email/verification resends; POST /api/email/change requests a deferred change (current password required; link goes to the new address; users.email only updates when that link is opened). Both throttled to once per 60s, returning 429 + retry_after. - GET /api/me and every session payload now include pending_email. Shared SessionPayload builds the user/session JSON for all entry points. Frontend - /verify-email view: posts the token, adopts the returned session, redirects. - /profile view: shows address + status, a resend button with a live cooldown (driven by retry_after / 429), and a change-email form (new address + current password) that surfaces the pending change. - Header shows a "verify email" badge linking to the profile. Tests: 9 new (EmailVerificationTest) covering the link lifecycle, throttle, and deferred change; AuthTest folded into ApiTestCase, which now routes mail to a per-test log. Suite: 32 passing. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
39 lines
884 B
JSON
39 lines
884 B
JSON
{
|
|
"name": "aneurin/php-todo-list",
|
|
"description": "Simple todo list REST API + SPA (PHP, SQLite)",
|
|
"type": "project",
|
|
"license": "MIT",
|
|
"require": {
|
|
"php": ">=8.1",
|
|
"ext-json": "*",
|
|
"ext-mbstring": "*",
|
|
"ext-pdo": "*",
|
|
"ext-pdo_sqlite": "*",
|
|
"firebase/php-jwt": "^7.0",
|
|
"phpmailer/phpmailer": "^7.1",
|
|
"slim/psr7": "^1.6",
|
|
"slim/slim": "^4.12",
|
|
"vlucas/phpdotenv": "^5.6"
|
|
},
|
|
"require-dev": {
|
|
"phpunit/phpunit": "^10.5"
|
|
},
|
|
"autoload": {
|
|
"psr-4": {
|
|
"App\\": "src/"
|
|
}
|
|
},
|
|
"autoload-dev": {
|
|
"psr-4": {
|
|
"Tests\\": "tests/"
|
|
}
|
|
},
|
|
"config": {
|
|
"sort-packages": true
|
|
},
|
|
"scripts": {
|
|
"migrate": "php bin/migrate.php",
|
|
"serve": "php -S localhost:8080 -t public"
|
|
}
|
|
}
|