sandrodach/MindSift
1
0 Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(auth): confirm the e-mail address of new accounts by link
MindSift CI & Docker Release / Build, Test in Container & Push (push) Successful in 2m21s
Details

Browse Source 
- Setting / REGISTRATION_VERIFY_EMAIL; only with SMTP and BASE_URL; invites skip it
- Hashed one-time tokens (48 h), resend with cooldown, unconfirmed accounts purged
- Approval modes notify admins only after the address is confirmed

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
sandrodachandClaude Opus 5.5 committed 2026-10-31 14:01:41 +01:00
1 parent 1406650b7c
commit ab97638361
25 files changed
+621 -56
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

frontend/src/features/settings/AdminSettingsView.tsx
+36 -3
View File
@@ -141,6 +141,9 @@ export const AdminSettingsView: React.FC<AdminSettingsViewProps> = ({
registrationMode: sys.registrationMode || (sys.allowRegistration ? 'open' : 'closed'),
registrationDomains: sys.registrationDomains || '',
registrationConfiguredViaEnv: Boolean(sys.registrationConfiguredViaEnv),
registrationVerifyEmail: Boolean(sys.registrationVerifyEmail),
registrationVerifyConfiguredViaEnv: Boolean(sys.registrationVerifyConfiguredViaEnv),
emailLinksAvailable: Boolean(sys.emailLinksAvailable),
instanceName: sys.instanceName || 'MindSift',
smtpHost: sys.smtpHost || '',
smtpPort: sys.smtpPort ? String(sys.smtpPort) : '587',
@@ -902,7 +905,10 @@ export const AdminSettingsView: React.FC<AdminSettingsViewProps> = ({
<div className="flex items-center gap-2.5 min-w-0">
<UserAvatar user={u} size="sm" className="border border-border/80" />
<div className="min-w-0">
<p className="font-bold text-main truncate">{u.displayName}</p>
<p className="font-bold text-main truncate flex items-center gap-2">
{u.displayName}
{u.emailUnverified && <span className="badge-neutral text-[10px] font-normal">E-Mail unbestätigt</span>}
</p>
<p className="text-muted text-[11px] truncate">
{u.email} · registriert am {new Date(u.createdAt).toLocaleDateString('de-DE')}
</p>
@@ -947,8 +953,8 @@ export const AdminSettingsView: React.FC<AdminSettingsViewProps> = ({
<div className="flex items-center gap-2">
<span className="font-bold text-main">{u.displayName}</span>
{!u.isActive && (
<span className="badge-err text-[10px]">
Gesperrt
<span className={`${u.emailUnverified ? 'badge-neutral' : 'badge-err'} text-[10px]`}>
{u.emailUnverified ? 'E-Mail unbestätigt' : 'Gesperrt'}
</span>
)}
</div>
@@ -1355,6 +1361,33 @@ export const AdminSettingsView: React.FC<AdminSettingsViewProps> = ({
<code className="font-mono">REGISTRATION_DOMAINS</code>) und hier nicht änderbar.
</p>
)}
{mode !== 'closed' && (
<div className="pt-3 border-t border-border flex items-start justify-between gap-4">
<div className="pr-2">
<p className="font-semibold text-main">E-Mail-Adresse bestätigen lassen</p>
<p className="text-[11px] text-muted mt-0.5">
Neue Konten ohne Einladung bekommen einen Link per E-Mail und sind erst danach aktiv (bei Freigabe
landen sie danach bei dir). Unbestätigte Konten werden nach 48 Stunden gelöscht.
</p>
{!settings.emailLinksAvailable && (
<p className="text-[11px] text-status-warn mt-1">
Wirkt erst mit eingerichtetem Mail-Server und gesetzter <code className="font-mono">BASE_URL</code>.
</p>
)}
{settings.registrationVerifyConfiguredViaEnv && (
<p className="text-[11px] text-status-warn mt-1">
Über <code className="font-mono">REGISTRATION_VERIFY_EMAIL</code> festgelegt.
</p>
)}
</div>
<ToggleSwitch
checked={Boolean(settings.registrationVerifyEmail)}
disabled={Boolean(settings.registrationVerifyConfiguredViaEnv)}
onChange={(registrationVerifyEmail) => handleSaveSystemSettings({ registrationVerifyEmail })}
title="E-Mail-Adresse bei der Registrierung bestätigen lassen"
/>
</div>
)}
</div>
);
})()}