ab5e4cad

By: Michael Lynch <git@mtlynch.io>

Merge master into email auth branch

Preserve the magic-link login flow while carrying over the applicable login hardening from master. The login POST handler now fails malformed form bodies explicitly and rejects invalid next paths before sending login email.
Codeberg

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 0s 3s 3s 4s 0s
Eval 4s 21s 329h21m48s 329h21m52s 0s
Build 8s 2m50s - - 0s
Suite 0s 3m16s - - 329h21m24s