fix: the sign-in code email no longer mentions the password
All checks were successful
Forgejo Docker Build / Root app tests (push) Successful in 48s
Forgejo Docker Build / Build Docker image (push) Successful in 6s

"Your password still works as usual" is not reassurance for everyone who
gets this mail. An account created through an invite has no password at
all, and one signing in with a code may never use theirs — for them the
sentence raises a question rather than settling one.

What the paragraph is for is saying that ignoring the mail is safe, and
it says that without the second sentence.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU
This commit is contained in:
Daniel 2026-09-12 23:34:14 +02:00
parent 36cb742ce7
commit 38b8fd584a

View file

@ -103,7 +103,7 @@ function emailBody(code, appName) {
'<p style="font-size:28px;font-weight:700;letter-spacing:4px;margin:16px 0;">' + code + '</p>' +
'<p>It expires in ' + TTL_MINUTES + ' minutes and can be used once.</p>' +
'<p style="color:#6b7280;font-size:13px;">If you did not ask to sign in, ignore this message ' +
'and nothing will happen. Your password still works as usual.</p>';
'and nothing will happen.</p>';
}
module.exports = { issue, consume, sweep, generate, normalise, emailBody,