bert.hausmans 79b7fe0b42 feat: account settings with Vuexy tab pattern and MFA banner fix ...

Restructures account/profile pages to match Vuexy's account-settings
tab pattern (Account, Security, Notifications) and fixes the MFA
enforcement banner that stayed visible after successful setup.

Backend:
- Add phone column to users table with migration
- Add PUT /me/profile endpoint for profile updates
- Create UpdateProfileRequest form request
- Update MeResource to include phone field

Organizer app:
- Rewrite account-settings as tabbed page (VTabs pill style + VWindow)
- Create AccountTab: avatar, profile form, email change, danger zone
- Create SecurityTab: password change, MFA method cards, backup codes,
  trusted devices, disable MFA danger zone
- Create NotificationsTab: placeholder with disabled toggles
- Fix MFA banner: set authStore.mfaSetupRequired = false on setup complete
- Update router guard to redirect to ?tab=security for MFA enforcement
- Update UserProfile menu links to use tab query params

Portal:
- Restructure profiel.vue with VTabs (Mijn profiel + Beveiliging)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-15 22:18:16 +02:00

..

Scopes

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

Company.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

CrowdList.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

CrowdType.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

EmailChangeRequest.php

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

EmailLog.php

feat: complete email infrastructure with queue, templates, logging, and API

2026-04-15 20:12:21 +02:00

Event.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

FestivalSection.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

Location.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

MfaBackupCode.php

feat: enterprise MFA with TOTP, email codes, backup codes, and trusted devices

2026-04-15 20:45:55 +02:00

MfaEmailCode.php

feat: enterprise MFA with TOTP, email codes, backup codes, and trusted devices

2026-04-15 20:45:55 +02:00

Organisation.php

feat: complete email infrastructure with queue, templates, logging, and API

2026-04-15 20:12:21 +02:00

OrganisationEmailSettings.php

feat: complete email infrastructure with queue, templates, logging, and API

2026-04-15 20:12:21 +02:00

OrganisationEmailTemplate.php

feat: complete email infrastructure with queue, templates, logging, and API

2026-04-15 20:12:21 +02:00

Person.php

feat: complete person identity matching system with fuzzy detection, revert, and manual link

2026-04-14 08:44:24 +02:00

PersonFieldValue.php

feat: registration form fields, section preferences, tag sync & schema updates

2026-04-12 22:10:16 +02:00

PersonIdentityMatch.php

feat: complete person identity matching system with fuzzy detection, revert, and manual link

2026-04-14 08:44:24 +02:00

PersonSectionPreference.php

feat: registration form fields, section preferences, tag sync & schema updates

2026-04-12 22:10:16 +02:00

PersonTag.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

RegistrationFieldTemplate.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

RegistrationFormField.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

Shift.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

ShiftAssignment.php

security: round 1 — quick wins (rate limiting, headers, mass assignment, logging)

2026-04-14 01:34:51 +02:00

ShiftWaitlist.php

…

TimeSlot.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

TrustedDevice.php

feat: enterprise MFA with TOTP, email codes, backup codes, and trusted devices

2026-04-15 20:45:55 +02:00

User.php

feat: account settings with Vuexy tab pattern and MFA banner fix

2026-04-15 22:18:16 +02:00

UserInvitation.php

security: round 3 — token security (crypto random, hashed storage, portal middleware)

2026-04-14 06:52:54 +02:00

UserOrganisationTag.php

feat: person tags system - org-level skills with self-reported and organiser-assigned sources

2026-04-10 11:15:43 +02:00

VolunteerAvailability.php

feat: shift assignment workflow with claim, approve, reject, cancel, and bulk approve

2026-04-10 17:00:56 +02:00