Files
jobtrackingapp/JobTrackerApi/appsettings.Development.json
T
cesnimda 904f3a8ec8 feat(auth): add configurable email verification enforcement
Auth:RequireEmailVerification (default off) gates whether local
register requires confirming email before login. OAuth new-user paths
are untouched -- Google/Microsoft already assert a verified email.
Adds verify-email and resend-verification-email endpoints, mirroring
the existing reset-password enumeration-avoidance and rate-limiting
patterns, plus a login-embedded resend affordance and a verify-email
landing page on the frontend.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-13 01:22:26 +02:00

48 lines
1.2 KiB
JSON

{
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft.AspNetCore": "Warning"
}
},
"Cors": {
"Origins": [
"http://localhost:3000",
"http://localhost:3001",
"https://jobs.cesnimda.uk"
]
},
"Exports": {
"DailyEnabled": true,
"DailyFolder": "exports",
"DailyHourLocal": 2
},
"Auth": {
"Require": true,
"AllowRegistration": true,
"RequireEmailVerification": false,
"JwtKey": "CHANGE_ME_DEV_ONLY_LONG_RANDOM_SECRET",
"JwtIssuer": "JobTrackerApi",
"JwtAudience": "job-tracker-ui",
"JwtExpiresMinutes": 720,
"AdminEmail": "admin@example.com",
"AdminPassword": "CHANGE_ME_STRONG_DEV_PASSWORD",
"GoogleClientId": "723556162227-llqucvpog2esn1dutmtvuul1lv374or6.apps.googleusercontent.com",
"MicrosoftClientId": "CHANGE_ME_MICROSOFT_CLIENT_ID"
},
"App": {
"PublicBaseUrl": "https://jobs.cesnimda.uk"
},
"Email": {
"Enabled": false,
"SmtpHost": "smtp.gmail.com",
"SmtpPort": 587,
"SmtpUser": "CHANGE_ME_GMAIL_ADDRESS",
"SmtpPassword": "CHANGE_ME_GOOGLE_APP_PASSWORD",
"From": "CHANGE_ME_GMAIL_ADDRESS",
"FromName": "Jobbjakt",
"SmtpEnableSsl": true,
"SmtpTimeoutMs": 15000
}
}