xarmian 1ba9c91992 feat: email unsubscribe for non-transactional emails (#96) ...

* feat: email unsubscribe for non-transactional emails

Add CAN-SPAM compliant unsubscribe support:

- New email_optouts table (by email address, not user ID) so
  uninvited recipients can opt out without an account
- HMAC-signed unsubscribe tokens (derived from Maileroo API key)
  so links work without authentication
- GET /api/v1/unsubscribe endpoint with simple HTML confirmation page
- Invitation emails now include unsubscribe footer link
- Welcome emails accept unsubscribe URL parameter
- Before sending invitation emails, check opt-out table and silently
  skip opted-out addresses (prevents invite spam)
- Password reset emails are exempt (transactional, user-initiated)

Fixes BUG-256.

* fix: hide "Copy invite link" when code is unrecoverable

For hashed invitations the plaintext code can't be recovered, so the
button was copying a broken URL. Now shows "Sent via email" label
instead. Only shows the copy button when join_url or code is available.

Fixes BUG-255.

2026-04-13 09:14:04 -04:00

..

sender_test.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

sender.go

feat: account settings, email infrastructure, and UX polish (#23)

2026-03-29 18:29:52 -04:00

templates.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

unsubscribe.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00