open-legal-products gives Mike's account security the full treatment
Mike now handles the awkward, high-stakes moments around sign-up, email changes and lost passwords with clearer safeguards and guidance.
The maintainers have completed the account journey around Supabase, a hosted authentication service, rather than stopping at a basic login screen. New users can verify their email, supply a display name, and see useful status screens when a link expires or authentication fails.
- Email changes now require confirmation on both sides, with pending-change and rate-limit messages in settings.
- Password recovery covers the request through to a confirmed reset, with a 10-character standard for new or changed passwords.
- Post-login redirects are restricted to approved internal destinations, reducing the chance of a user being sent somewhere unsafe.
The account screens also now share a consistent, calmer presentation across login, recovery and multi-factor authentication.
So what Legal teams evaluating Mike should care because dependable identity controls are foundational when a product may hold sensitive client and matter information.
Spotted something wrong? Or know the PR text has fresher detail than the writeup above?