v1.2.40Web App
•1 min read

Authentication Route Hardening

Fixed an issue where unverified users could access settings, and secured the email verification page to prevent unauthenticated access.

#What's Changed

  • [Fix] Secured /settings to automatically redirect users who have not yet verified their email.
  • [Improvement] Removed URL parameter reliance on /auth/verify-email and ensured it requires an active session.
  • [Improvement] Polished the UI of the verify-email page to perfectly match the rest of the authentication suite.