Bert Hausmans e27c1ca06c chore(auth): non-blocking follow-ups from final review ...

- /api/stats: add verifyCsrf middleware (defense-in-depth; no-op for GETs)
- VerifyEmailPage: useRef guard to prevent React StrictMode double-fire of
  the single-use verify token in dev
- router.tsx: route-level code splitting via React.lazy + Suspense; initial
  bundle drops from 397 KB to 224 KB with per-route chunks (0.3–14 KB each)
- e2e: wait for verify-email completion before login; bump Account-menu
  timeout to handle Vite cold-chunk compile

2026-05-20 23:27:52 +02:00

..

drizzle

feat(db): add users, sessions_auth, auth_tokens tables

2026-05-20 22:42:07 +02:00

src

chore(auth): non-blocking follow-ups from final review

2026-05-20 23:27:52 +02:00

drizzle.config.ts

feat(db): drizzle schema, migrations, and seed

2026-05-20 20:40:00 +02:00

package.json

feat(auth): named rate limiters (skip in tests)

2026-05-20 22:52:42 +02:00

tsconfig.json

feat(backend): bootstrap express app with error handling

2026-05-20 20:36:55 +02:00

vitest.config.ts

feat(backend): bootstrap express app with error handling

2026-05-20 20:36:55 +02:00