From 4980920eb09d2909981eaa50cb2799d8350759f0 Mon Sep 17 00:00:00 2001 From: Anton Afanasyeu Date: Tue, 23 Jun 2026 18:53:35 +0200 Subject: [PATCH] docs: verify email uses short link + QR attachment with src=qr Co-authored-by: Cursor --- 20260607-2FA-email-mobile-auth-flow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/20260607-2FA-email-mobile-auth-flow.md b/20260607-2FA-email-mobile-auth-flow.md index 3920c76..3bee835 100644 --- a/20260607-2FA-email-mobile-auth-flow.md +++ b/20260607-2FA-email-mobile-auth-flow.md @@ -209,7 +209,7 @@ Outbound (BE PHP): From: Android Cast Issues Reply-To: info@apps.f0xx.org SMTP: transactional relay (see §9.5) - Verify/reset links: always **`https://s.f0xx.org/…`** (url shortener) — never raw long URLs in email bodies + Verify/reset links: always **`https://s.f0xx.org/…`** in the email body; attach **QR PNG** encoding the same short link with **`?src=qr`** for phone scan analytics ``` Document chosen provider in [`INFRA.md`](INFRA.md) § changelog once live.