docs: SMTP fixed + Midtrans provider status in audit findings
This commit is contained in:
@@ -3,7 +3,7 @@
|
||||
Dokumen ini mencatat temuan yang membutuhkan perhatian tim sebelum produksi.
|
||||
Semua diuji lokal (Postgres `dimentorin`, backend :4099).
|
||||
|
||||
## 1. SMTP email verification broken (blocker aktivasi user baru)
|
||||
## 1. SMTP email verification broken (blocker aktivasi user baru) — ✅ FIXED (2026-08-05, Google App Password)
|
||||
|
||||
- Endpoint `POST /v1/iam/auth/send-otp` gagal: `SMTP transport error (535): Username and Password not accepted` — kredensial `.env` (`SMTP_EMAIL=dev@example.com`, `SMTP_PASSWORD=dev`) ditolak Google SMTP.
|
||||
- `POST /v1/iam/auth/verify-email` tetap butuh OTP untuk memanggil, tapi lihat poin 2.
|
||||
|
||||
Reference in New Issue
Block a user