New POST /api/auth/verify-code checks the code without consuming it (wrong guesses still count toward the 5-attempt lockout); the password fields only appear after the code verifies. Email step hints that codes go only to registered @utopiabrands.com accounts. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| routes | ||
| __init__.py | ||
| auth.py | ||
| deps.py | ||
| main.py | ||