bert.hausmans 948687f27e feat: enterprise MFA with TOTP, email codes, backup codes, and trusted devices ...

Three verification methods (TOTP authenticator, email code, backup codes),
trusted device management with 30-day expiry, role-based enforcement for
super_admin and org_admin, admin reset capability, and full test coverage
(46 tests). Modifies login flow to support MFA challenge/response with
temporary session tokens stored in cache.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-15 20:45:55 +02:00

..

api.php

feat: enterprise MFA with TOTP, email codes, backup codes, and trusted devices

2026-04-15 20:45:55 +02:00

console.php

feat: fase 2 backend — crowd types, persons, sections, shifts, invite flow

2026-04-08 01:34:46 +02:00

web.php

security: round 3 — token security (crypto random, hashed storage, portal middleware)

2026-04-14 06:52:54 +02:00