Tomas DvorakandDevin 92b1810c07 fix(auth): surface sign-up failures, trust serving origin, unbreakable mail probe ...

Self-hosted sign-up bounced back to the bootstrap screen for three
compounding reasons:

- better-auth's client resolves { data, error } on HTTP failure; the UI
  ignored res.error and showed "Account created — signing you in", hiding
  the real 403/429/500.
- trustedOrigins was a static localhost-only list. Browsing the instance
  via LAN IP or custom port failed every auth POST once cookies existed.
  Origins are now derived from the request's public host (forwarded by
  nginx), so any origin serving the app works.
- hasMailTransport threw when core.settings was unreadable (fresh volume,
  backend still migrating), so sign-up 500'd and the startup backfill
  could crash-loop the service. Both now degrade to "no transport".

Verified live: LAN-style origin sign-up succeeds, missing core.settings
logs a warn instead of exiting, and the frontend shows real errors.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-28 16:23:01 +02:00

..

src

fix(auth): surface sign-up failures, trust serving origin, unbreakable mail probe

2026-09-28 16:23:01 +02:00

Dockerfile

feat: phase 5 distribution — tauri shell, pwa, desktop release artifacts

2026-09-16 19:59:53 +02:00

package.json

feat: phase 5 distribution — tauri shell, pwa, desktop release artifacts

2026-09-16 19:59:53 +02:00

tsconfig.json

initiall commit

2026-04-10 12:03:31 +02:00