Ilia Denisov 25d80bc31d feat(server): confirm-link endpoint for the one-tap deeplink ...

Add POST /internal/sessions/email/confirm-link: it verifies a deeplink token via
ConfirmByToken and, for a login, mints a session (the deeplink page signs in with
it); for a link, attaches the confirmed email and reports "confirmed" or
"merge_required" (the app drives the interactive merge). The token, not a request
session, is the authorization. Add LinkConfirmation.IsLogin() and integration tests
for the login, link and merge branches (the token is read from the mailed link).
The gateway RPC, live event and SPA route follow.

2026-07-03 04:13:48 +02:00

..

banner.go

feat(telegram,game): single bot + per-user variant preferences

2026-06-20 14:23:25 +02:00

chataccess.go

feat(telegram): promo bot + channel-chat moderation gate

2026-06-21 14:46:51 +02:00

csvsafe_test.go

Admin Messages CSV: defuse spreadsheet formula injection

2026-06-08 22:09:26 +02:00

dto_test.go

feat(account): throttle confirm-code sends per recipient

2026-07-03 03:02:49 +02:00

dto.go

feat(telegram,game): single bot + per-user variant preferences

2026-06-20 14:23:25 +02:00

export_test.go

feat(export): server-rendered artifacts behind one signed download URL (#160)

2026-07-02 21:58:07 +00:00

export.go

feat(export): server-rendered artifacts behind one signed download URL (#160)

2026-07-02 21:58:07 +00:00

handlers_account.go

feat(telegram,game): single bot + per-user variant preferences

2026-06-20 14:23:25 +02:00

handlers_admin_banners.go

fix(ads): verify a message belongs to its campaign before edit/delete

2026-06-15 23:05:41 +02:00

handlers_admin_console.go

feat(vk): embed the game as a VK Mini App

2026-06-27 11:37:31 +02:00

handlers_admin_feedback.go

feat(feedback): capture the browser UTC offset; Filed time in three zones

2026-06-22 18:05:39 +02:00

handlers_admin_replay.go

feat(game): official first-move tile draw + admin step-by-step replay

2026-06-20 08:47:18 +02:00

handlers_auth.go

feat(server): confirm-link endpoint for the one-tap deeplink

2026-07-03 04:13:48 +02:00

handlers_bans.go

feat(gateway): temporary IP ban (fail2ban) fed by rejections + honeypot/honeytoken

2026-06-21 08:54:20 +02:00

handlers_blocks.go

fix(social): robot blocks

2026-06-18 13:12:19 +02:00

handlers_dict.go

feat: on-device move preview (local eval) with network fallback

2026-07-01 22:58:40 +02:00

handlers_feedback.go

feat(feedback): capture the browser UTC offset; Filed time in three zones

2026-06-22 18:05:39 +02:00

handlers_friends.go

feat(social): per-game friend request to disguised robots + lobby/stats/tile cosmetics

2026-06-19 21:39:27 +02:00

handlers_game.go

feat: sparser robot nudges, typed unread badge, lobby unread bump

2026-06-19 16:50:48 +02:00

handlers_invitations.go

feat(telegram,game): single bot + per-user variant preferences

2026-06-20 14:23:25 +02:00

handlers_link.go

fix(ads): restore reliable banner fades + keep banner on profile update

2026-06-16 06:09:35 +02:00

handlers_ratelimit.go

R6(a): de-stage code, docs, READMEs; split stage6_test

2026-06-10 16:56:03 +02:00

handlers_test.go

Backend infers play direction; UI previews words and gates submit on legality

2026-06-11 22:42:33 +02:00

handlers_user.go

feat(telegram,game): single bot + per-user variant preferences

2026-06-20 14:23:25 +02:00

handlers.go

feat(server): confirm-link endpoint for the one-tap deeplink

2026-07-03 04:13:48 +02:00

middleware_console_test.go

Stage 10: admin console & dictionary ops (complaint review, hot-reload, broadcasts) (#11)

2026-06-04 07:27:49 +00:00

middleware_test.go

Stage 1: backend foundation (Postgres, sessions, accounts, OTel)

2026-06-02 13:52:26 +02:00

middleware.go

feat(admin): manual account blocking (suspensions)

2026-06-14 21:55:59 +02:00

server_test.go

Stage 1: backend foundation (Postgres, sessions, accounts, OTel)

2026-06-02 13:52:26 +02:00

server.go

feat(export): server-rendered artifacts behind one signed download URL (#160)

2026-07-02 21:58:07 +00:00