nexxo b64a9f9238 Give the two-factor page a way back, and a shape ... Clicking "Einrichten" generated a secret and showed the QR with no exit: leaving meant navigating away, which left an unconfirmed enrolment on the account that nothing on the console ever displayed. cancelSetup() clears it — it was never confirmed, so it never protected anything. The page was also one card with four states stacked into it. Now each state is its own panel, the enrolment step says which step it is and carries numbered instructions beside the code, and the recovery codes get their own card with a copy button instead of being a footnote under whatever came before them.		2026-07-28 22:25:42 +02:00
..
AdminConsoleTest.php	Send a guest bounced off the console to the console's own sign-in	2026-07-28 13:32:05 +02:00
AdminHostRestrictionTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
AdminSettingsTest.php	Check users directly for the reverse operator-identity collision, not just customers	2026-07-28 15:36:29 +02:00
BroadcastAuthTest.php	Authorize the console's live feed on the operator guard, not the default	2026-07-28 13:31:50 +02:00
ConsoleHostSeparationTest.php	Match the logout exemption through AdminArea, not a bare route check	2026-07-28 15:27:06 +02:00
ConsoleNetworkTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
ConsoleReportsRealDataTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
CustomerRevenueTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
DatacenterTest.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
HostManagementTest.php	Send a guest bounced off the console to the console's own sign-in	2026-07-28 13:32:05 +02:00
InstanceAdminAccessTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
MaintenanceTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
OperatorLogoutTest.php	Stop the console logout from destroying a shared portal session	2026-07-28 13:58:42 +02:00
OperatorModelTest.php	Give the people who run CluPilot a table of their own	2026-07-28 09:20:54 +02:00
OperatorTwoFactorEnrollmentTest.php	Give the two-factor page a way back, and a shape	2026-07-28 22:25:42 +02:00
OperatorTwoFactorPolicyTest.php	Move operator two-factor enrolment off admin.settings onto its own page	2026-07-28 15:11:20 +02:00
PasswordConfirmationGuardTest.php	Satisfy Pint on the two new guard-boundary tests	2026-07-28 15:10:58 +02:00
PlanAdminTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
ProvisioningActionsTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
RbacMoveTest.php	Preflight every customer conflict before this migration mutates anything	2026-07-28 16:07:11 +02:00
RbacTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SecretCipherTest.php	Make isUsable() apply the same 32-byte rule encrypter() does	2026-07-28 05:09:09 +02:00
SecretVaultTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SecretsPageTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
UpdateButtonTest.php	Answer a check at once, start an update at once, and count down to neither	2026-07-28 22:25:07 +02:00
VpnTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00