wangjia
77ce809d48
fix(auth): SMTP 信封发件人用裸地址,修 501;发信失败记日志
两个真问题,前者被后者掩盖:
1. mailer.go 把带显示名的 SMTP_FROM(「穿山甲 <noreply@x>」)直接当 SMTP
信封发件人(MAIL FROM)传给 smtp.SendMail,Resend 报 501 Bad sender address
syntax → 验证码发不出。改用 net/mail 解析出裸地址作信封发件人,From: 头
仍保留完整显示名。
2. service.go 两处异步发信把错误静默吞了(_ = SendCode/SendAlreadyRegistered),
导致 SMTP 故障日志无痕、难排查(本次端口被封+501 都被吞)。改为失败时
slog.Error 记日志,邮箱经 maskEmail 打码,绝不记验证码(守 no-secret-in-logs)。
测试:TestEnvelopeFrom(显示名/裸址/unicode → 裸址)守 501 回归;TestMaskEmail
守日志脱敏。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-28 07:50:37 +08:00
..
2026-06-18 00:01:12 +08:00
2026-06-25 23:01:27 +08:00
2026-06-16 00:52:26 +08:00
2026-06-15 20:51:08 +08:00
2026-06-28 07:50:37 +08:00
2026-06-25 21:19:10 +08:00
2026-06-18 00:01:03 +08:00
2026-06-18 00:01:43 +08:00
2026-06-25 21:19:10 +08:00
2026-06-15 23:09:56 +08:00
2026-06-25 10:08:50 +08:00
2026-06-13 14:45:46 +08:00
2026-06-13 01:44:21 +08:00
2026-06-18 00:01:26 +08:00
2026-06-13 14:21:55 +08:00
2026-06-24 23:35:23 +08:00
2026-06-18 00:01:26 +08:00
2026-06-13 02:16:16 +08:00
2026-06-18 00:01:26 +08:00
2026-06-25 21:19:10 +08:00
2026-06-13 14:49:32 +08:00
2026-06-25 21:19:10 +08:00