Bump cryptography from 46.0.3 to 46.0.5

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.3 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

requirements.txt

@@ -7,7 +7,7 @@ argon2-cffi-bindings==25.1.0
 certifi==2025.10.5
 cffi==2.0.0
 click==8.3.0
-cryptography==46.0.3
+cryptography==46.0.5
 dnspython==2.8.0
 email-validator==2.3.0
 fastapi==0.119.0

slopserver/server.py

@@ -34,6 +34,7 @@ from slopserver.settings import settings
 from slopserver.models import Domain, Path, User
 from slopserver.models import SlopReport, SignupForm, altcha_validator
 from slopserver.db import select_slop, insert_slop, get_user, create_user, verify_user_email
+from slopserver.email import generate_verification_email, send_email
 
 app = FastAPI()
 
@@ -150,9 +151,10 @@ def signup_form(form_data: Annotated[SignupForm, Form()]):
     # send verification email
     # create a jwt encoding the username and a time limit to be the verification URL
     token = generate_verification_token(form_data.email)
-    return token
-
     
+    email_html = generate_verification_email(settings.api_base + "verify/?token=" + token)
+    status = send_email(form_data.email, "Slop Farmer Email Verification", email_html)
+    return status
 
 @app.get("/verify")
 def verify_email(token: Annotated[str, AfterValidator(verify_verification_token)]):
@@ -191,6 +193,8 @@ def simple_login(username: Annotated[str, Form()], password: Annotated[str, Form
     user = auth_user(username, password, DB_ENGINE)
     if not user:
         raise HTTPException(status_code=401, detail="Incorrect username or password")
+    if not user.email_verified:
+        raise HTTPException(status_code=401, detail="Unverified email address")
     token = generate_auth_token(username)
     return {"access_token": token, "token_type": "bearer"}
     

slopserver/settings.py

@@ -8,5 +8,6 @@ class ServerSettings(BaseSettings):
     resend_token: str = "re_NXpjzbqR_KgAbu72PKjYHcquX24WvnN3i"
 
     sender_email: str = "slopfarmer@jack-case.pro"
+    api_base: str = "api.slopfarmer.jack-case.pro/"
 
 settings = ServerSettings()