feat(auth): implement legacyFetchSignInWithEmail behaviour for Angular and React#1343

Open

russellwheatley wants to merge 37 commits into

mainfrom

fetchsigninwithemail

Commits on Mar 23, 2026

Commits on Mar 26, 2026

Commits on Apr 2, 2026

Commits on Jul 16, 2026

fix(auth): preserve OAuth credential for legacy recovery
russellwheatley
committed
fix(core): stop opening legacy sign-in recovery UI with nothing actionable
russellwheatley
committed
refactor(core): extract shared PENDING_CREDENTIAL_STORAGE_KEY constant
russellwheatley
committed
docs: document Email Enumeration Protection trade-off for legacyFetchSignInWithEmail
russellwheatley
committed
fix(react,angular): never re-offer the just-attempted provider in recovery UI
russellwheatley
committed
docs(core): document plaintext sessionStorage trade-off for pending credentials
russellwheatley
committed
test(core): add regression coverage for silent error-swallowing in auth.ts
russellwheatley
committed

Commits on Jul 20, 2026

Merge branch 'main' into fetchsigninwithemail
russellwheatley
authored

Commits on Jul 23, 2026

fix(core): read pending credential before clearing legacy recovery state
russellwheatley
committed