kolaente 52bcd3e093 fix(user): keep old email active until new one is confirmed ...

Changing the email no longer overwrites the address and flips the account
to StatusEmailConfirmationRequired. The new address is stored as
pending_email and only applied when the confirm token is used (valid 24h),
so a lost or misaddressed confirmation mail can no longer lock the user
out. The change can be repeated to fix typos, cancelled, or the mail
resent; confirmation mails are throttled to one per minute per user, and
stale change tokens are swept by the cleanup cron.

Fixes #3481

2026-08-18 22:03:38 +02:00

..

domain_test.go

…

domain.go

…

mail_test.go

…

mail.go

…

send_mail_test.go

…

send_mail.go

…

testing.go

…