Link the admin's recovery-code notice to the flow the code was minted on #200

2026-10-31T13:05:10+01:00

lilleman commented

2026-10-31 13:05:10 +01:00

The recovery-code notice on the admin user page links the recovery_link Kratos returned with the code, instead of a bare /recovery, so the user enters the code in the flow it was minted on.

The recovery-code notice on the admin user page links the `recovery_link` Kratos returned with the code, instead of a bare `/recovery`, so the user enters the code in the flow it was minted on.

lilleman added 1 commit 2026-10-31 13:05:11 +01:00

Link the admin's recovery-code notice to the flow the code was minted on

CI / full-gate (push) Failing after 1m1s

Details

4cb21d8909

lilleman added 4 commits 2026-10-31 13:11:23 +01:00

Answer security round 1: 0 🔴, 0 🟡 (0 misread); /security-review found nothing, the link comes from Kratos' admin response behind users:write 767c76b16c

Answer stability round 1: 0 🔴, 2 🟡 (0 misread); the admin recovery journey gets an E2E, the Kratos comments no longer claim a mailed link 00fe8b0dd2

Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); the notice tells the admin to send the link and the code f340933e39

Answer prose round 1: 0 🔴, 2 🟡 (0 misread); the view header calls the link a URL, the always-present code loses its guard, the test comment goes

CI / full-gate (push) Successful in 3m31s

Details