feat: add secure invitation and reset links

templates/forgot_password.html

@@ -1 +1,23 @@
-{% extends "base.html" %}{% block content %}<section class="mx-auto max-w-md rounded-xl border border-line bg-white p-5 shadow-panel sm:p-6"><h1 class="text-2xl font-extrabold">找回密码</h1><p class="mt-2 text-sm text-textSub">输入邮箱后，如账户存在会收到验证码。</p><form method="post" class="mt-5 space-y-4"><input type="hidden" name="csrf_token" value="{{ csrf_token() }}"><input name="email" type="email" required class="w-full rounded-lg border border-line px-3 py-2" placeholder="邮箱"><button class="ui-btn ui-btn-primary w-full">发送验证码</button></form></section>{% endblock %}
+{% extends "base.html" %}
+
+{% block title %}找回密码{% endblock %}
+
+{% block content %}
+<section class="mx-auto max-w-md rounded-xl border border-line bg-white p-5 shadow-panel sm:p-6">
+  <h1 class="text-2xl font-extrabold">找回密码</h1>
+  <p class="mt-2 text-sm text-textSub">输入邮箱后，如账户存在会收到一次性重置链接。</p>
+
+  {% with messages = get_flashed_messages(with_categories=true) %}
+    {% for category, message in messages %}
+    <p class="mt-4 rounded-lg p-3 text-sm {{ 'bg-dangerSoft text-dangerText' if category == 'error' else 'bg-blueSoft text-primaryDeep' }}">{{ message }}</p>
+    {% endfor %}
+  {% endwith %}
+
+  <form method="post" class="mt-5 space-y-4">
+    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
+    <label class="sr-only" for="resetEmail">登录邮箱</label>
+    <input id="resetEmail" name="email" type="email" required autocomplete="email" class="w-full rounded-lg border border-line px-3 py-2" placeholder="登录邮箱">
+    <button class="ui-btn ui-btn-primary w-full">发送重置链接</button>
+  </form>
+</section>
+{% endblock %}