Repository navigation
Blog: subscribe and unsubscribe from the newsletter #122
Description
Activity
- added a parent issue
on Sep 15, 2026 Implemented in #172 — work continues in the PR from here. Shipped together because #121 is the decision that determines what #122 can be.
#121: browser handoff. No public blog-read endpoint —
/api/blog,/api/blog/postsand/api/blog/listall 404, and the only other blog routes are admin-onlycookieAuth. Nothing to render in-app.#122: subscribe works; unsubscribe does not. Both
GETandPOST /api/blog/unsubscribetake only a?token=from the email footer, so an app knowing just the address cannot unsubscribe anyone. The panel says where the link lives instead of offering a control that can't work. Subscribe is double opt-in and the UI says so explicitly.
Endpoints
POST /api/blog/subscribe—{email}, double opt-in (a confirmation email follows).GET /api/blog/subscribe/confirm— the public confirmation link; likely belongs in the browser, not the app.GET/POST /api/blog/unsubscribe— thePOSTform is the RFC-8058 one-click target.Acceptance criteria
SubscribeToBlogAsync(email)and the unsubscribe counterpart; shapes verified live (use a throwaway address — do not subscribe the test account's real inbox).