ShaoLOWu 21fb080530

fix(frontend): allow non-ASCII local parts in auth password forms (#7488) (#7498) ...

* fix(frontend): allow non-ASCII local parts in auth password forms (#7488)

The sign-in, register, admin-setup and change-password forms relied on the
browser's type="email" constraint validation, which rejects any non-ASCII
local part before the submit handler runs. The backend identity schema
deliberately accepts such addresses (see emailSchema in @/core/auth/types),
so an account created via the API, an administrator or OIDC could never sign
in through the password form.

Forms are now noValidate, and the permissive isValidEmail helper (one @,
non-empty local part and domain, no whitespace) runs in the handlers instead,
staying strictly weaker than what the backend accepts.

* fix(auth): normalize emails and restore form password checks

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-10-25 22:09:58 +08:00

..

e2e

fix(frontend): make docs search work on desktop and mobile (#6715)

2026-10-25 21:31:11 +08:00

e2e-auth

fix(frontend): return to the opened workspace page after signing in (#6681)

2026-10-11 19:05:03 +08:00

e2e-real-backend

fix(authz): cover create/run/memory/agent routes with permission checks; scope USER.md per user (#4989)

2026-09-23 15:37:26 +08:00

e2e-record

fix(title): avoid default LLM call before stream end (#3885)

2026-06-30 18:58:02 +08:00

unit

fix(frontend): allow non-ASCII local parts in auth password forms (#7488) (#7498)

2026-10-25 22:09:58 +08:00