Implement device‑bound JWT auth for browser extensions in Wasp with refresh rotation, secure CORS/rate limiting, and Prisma‑backed sessions.

Co‑authored with GPT‑5 (AI assistant).

Use Mailgun in a Wasp app and set a Reply-To header. Wasp’s built-in email sender doesn’t expose provider headers, so we call Mailgun’s REST API with a tiny server helper and reuse Wasp env vars.

• Domain reputation drives deliverability. Good rep = inbox; bad rep = spam.
• Split domains/subdomains: marketing vs transactional to protect reputation.
• Reference: Mailgun FAQ — How do I pick a domain name?

• Initial Assessment
• Adding Meta Description
  • Issue
  • Solution
• Adding robots.txt