Phase: 1 Checkpoint: 1.12 Category: Authentication Published: July 16, 2026
Phase 1.12 added the full account-registration and verification lifecycle.
What changed
Added Admin Only, Self Registration, and Both registration modes.
Added secure single-use activation and verification tokens.
Added configurable link expiration.
Added public registration and account pages.
Added welcome and verification email templates.
Added resend controls for staff.
Separated public member access from staff dashboard access.
Security
Passwords are hashed immediately and plaintext passwords are never stored. Admin-created users receive a secure link to establish their own password.
Leave a comment
Comments are reviewed before appearing publicly.
Approved comments