justin/step-tracker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Branded magic link email, rate limiting, security improvements

Browse Source
This commit is contained in:
Sterling Archer
2026-06-18 19:09:20 -07:00
parent b3bb2f13b7
commit 7403bb1d93
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config.js
+1
View File
@@ -9,5 +9,6 @@ window.STEPMATES_CONFIG = {
}, },
webhookBase: "https://webhook-mgc3i5pbxq-uc.a.run.app", webhookBase: "https://webhook-mgc3i5pbxq-uc.a.run.app",
adminNotifyUrl: "https://adminnotify-mgc3i5pbxq-uc.a.run.app", adminNotifyUrl: "https://adminnotify-mgc3i5pbxq-uc.a.run.app",
sendMagicLinkUrl: "https://sendmagiclink-mgc3i5pbxq-uc.a.run.app",
appUrl: "https://justinoros.github.io/step-tracker" appUrl: "https://justinoros.github.io/step-tracker"
}; };
index.html
+3 -5
View File
@@ -1555,11 +1555,9 @@ window.sendMagicLink = async function() {
btn.disabled = true; btn.disabled = true;
btn.innerHTML = '<span class="spinner"></span> Sending…'; btn.innerHTML = '<span class="spinner"></span> Sending…';
try { try {
const continueUrl = APP_URL + '?email=' + encodeURIComponent(email); const res = await fetch(`${window.STEPMATES_CONFIG.sendMagicLinkUrl}?email=${encodeURIComponent(email)}`);
await sendSignInLinkToEmail(auth, email, { const data = await res.json();
url: continueUrl, if (!res.ok) throw new Error(data.error || 'Failed to send');
handleCodeInApp: true
});
localStorage.setItem('emailForSignIn', email); localStorage.setItem('emailForSignIn', email);
document.getElementById('auth-card').style.display = 'none'; document.getElementById('auth-card').style.display = 'none';
document.getElementById('magic-sent-card').style.display = 'block'; document.getElementById('magic-sent-card').style.display = 'block';