Address 4 code-review findings in registration and login paths

ส่งแล้ว

18 เมษายน 2569 เวลา 16:45 UTC

ผู้เขียน

Kamo

ตั้งค่า

be2e3ec

- Hide raw exception message in /register 500 path; log instead - Fail-closed (503) on email-verified DB check failure in login - verifyEmailToken throws if user row is missing instead of silently no-oping - Move sendVerificationEmail outside @Transactional in register so the outbound HTTP call only fires after the token row is committed