New POST /api/auth/verify-code checks the code without consuming it (wrong guesses still count toward the 5-attempt lockout); the password fields only appear after the code verifies. Email step hints that codes go only to registered @utopiabrands.com accounts. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| core | ||
| db | ||
| services | ||
| __init__.py | ||
| config.py | ||