Continuing the security hardening work on my Laravel React Starter Kit (i18n edition).
I've added email notifications for security-sensitive account changes, including password changes, password resets, 2FA changes, passkey updates, and account deletion.
Email changes also trigger a notification to the previous email address.
One important detail: notifications are sent only after a successful operation, and delivery failures don't break the account action itself.
The GIF shows a password change triggering an email in the local mail viewer.
PR #6 (merged into the security-hardening branch):
https://github.com/catatsumuri/react-starter-kit-i18n/pull/6
I'm working on security hardening for my Laravel React Starter Kit (i18n edition).
The first step is building a reusable notification system.
It supports in-app notifications, email, and Slack, with a notification bell in the React UI.
The goal is to reuse this infrastructure…
GitHubMerge notification-alerts (general notification system) into security-hardening by catatsumuri · Pull Request #7 · catatsumuri/react-starter-kit-i18nSummary Brings in feature/notification-alerts (which already contains all of feature/notifications) as the base notification infrastructure for this integration branch. Adds GeneralNotification/Se...
GitHubSecurity event notifications by catatsumuri · Pull Request #6 · catatsumuri/react-starter-kit-i18nSummary Sends email notifications for security-relevant events (password change/reset, 2FA enable/disable, recovery codes regenerated, passkey added/removed, email changed, account deleted), inclu...
commit b081191