new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Better Auth · Authentication · all subjects

email & password: password reset

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Magic-link and email-OTP reset credentials on unverified accounts

When a user signs in through magic-link or email-OTP to an account whose email was never confirmed, the system resets the account's credentials before signing them in. Any existing password is removed, existing sessions are revoked, and proven control of the mailbox becomes the source of truth. If a user signed up with email and password but first signed in through magic-link or email-OTP rather than confirming the verification email, their password is cleared and they must set a new one through password reset.

Email OTP password reset retry support

Users can now retry email OTP password resets after entering an invalid password.

Password reset token prevents concurrent use

A password reset token can no longer change the password more than once when used from several requests at the same time.

Single-use verification flow connection pool handling

Single-use verification flows no longer hang on database adapters that use a one-connection pool. This fixes magic-link verification and similar token checks in connection-limited serverless database setups.

Give your agent this brain