Modules§
- bot_
check - Keeps bots off the email form: a honeypot field, and a Cloudflare Turnstile token when configured. Rate limits are the caller’s job.
- email_
code - One-time email codes for sign-up and login, kept in the visitor’s session. Nothing touches the tenant or user tables until the address is verified, and a code only works in the browser that asked for it.
- routes