Josh Rogers a1635218a8 Add SMTP infrastructure + auth rate limiting ...

Foundation for the upcoming email-based invite and password-reset flows.

- IEmailSender abstraction with SmtpEmailSender (MailKit 4.16) and a
  LoggingEmailSender fallback used automatically when SMTP is unconfigured
  so local dev works without a real SMTP server.
- Fixed-window rate limits keyed by remote IP: 10 / 15 min on /login,
  5 / hour on /register. Returns 429 with Retry-After. Bypassed in the
  Testing environment so the existing integration suite is unaffected.
- New env vars (SMTP_*, APP_BASE_URL) plumbed through docker-compose
  and documented in .env.example.

2026-05-08 22:35:57 -05:00

src

Add SMTP infrastructure + auth rate limiting

2026-05-08 22:35:57 -05:00

.env.example

Add SMTP infrastructure + auth rate limiting

2026-05-08 22:35:57 -05:00

.gitignore

Add Playwright MCP server config and ignore its scratch dir

2026-05-07 22:09:20 -05:00

.mcp.json

Add Playwright MCP server config and ignore its scratch dir

2026-05-07 22:09:20 -05:00

BACKLOG.md

Backlog: email-based admin invites + email confirmation in one flow

2026-05-08 22:06:03 -05:00

CLAUDE.md

Introduce Family entity and bootstrap default family on startup

2026-05-07 23:00:00 -05:00

docker-compose.yml

Add SMTP infrastructure + auth rate limiting

2026-05-08 22:35:57 -05:00

ideas.md

Add BACKLOG.md and ideas.md from product exploration session

2026-05-06 23:32:56 -05:00

package-lock.json

Initial commit: YesChef family shopping list and recipe app

2026-05-06 19:32:39 -05:00

package.json

Initial commit: YesChef family shopping list and recipe app

2026-05-06 19:32:39 -05:00

S

Description

No description provided

446 KiB

Languages

C# 71.8%

Svelte 17.7%

TypeScript 8.7%

PowerShell 1%

CSS 0.5%

Other 0.2%