fix(auth-service): stop "Invalid OTP" flash on successful sign-in - #134

Merged

aspiers merged 7 commits into

mainfrom

fix/otp-double-submit-flash

May 1, 2026

Commits on May 1, 2026

fix(auth-service): drop duplicate OTP verify submits that flashed "Invalid OTP"

authored and
aspiers
committed
bce65b5
test(auth-service): hoist renderDefault helper to module scope

aspiers
and
claude
committed
3d659a2
test(auth-service): replace ReDoS-flagged regex with substring count

aspiers
and
claude
committed
ef55606
fix(auth-service): clear OTP boxes on verify error

aspiers
and
claude
committed
56c6665
fix(auth-service): centre flash messages and add stable CSS hook

aspiers
and
claude
committed
e6745e7
docs(changeset): tighten OTP changeset and reaudience CSS hook

aspiers
and
claude
committed
e232aa0
docs(changeset): rewrite per writing-changesets skill

aspiers
and
claude
committed
9392adc