From 696dbc9d04ed002c00a5bc32a9356bbb40029167 Mon Sep 17 00:00:00 2001
From: boban <boban@git.bave.dev>
Date: Fri, 12 Jun 2026 14:06:56 +0200
Subject: [PATCH] fix(2fa): render the setup QR as <img> (getQRCodeInline
 returns a data URI)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

getQRCodeInline() returns a base64 data URI (data:image/svg+xml;base64,…), not raw
SVG — so {!! !!} dumped it as text. Render it via <img src> with a light quiet-zone.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 resources/views/livewire/auth/two-factor-setup.blade.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/resources/views/livewire/auth/two-factor-setup.blade.php b/resources/views/livewire/auth/two-factor-setup.blade.php
index efe2273..7cda438 100644
--- a/resources/views/livewire/auth/two-factor-setup.blade.php
+++ b/resources/views/livewire/auth/two-factor-setup.blade.php
@@ -2,8 +2,10 @@
     <h1 class="font-display text-lg font-semibold text-ink">Zwei-Faktor einrichten</h1>
     <p class="mt-1 text-sm text-ink-3">Scanne den Code mit einer Authenticator-App (Aegis, Google Authenticator, …) und bestätige mit einem Code.</p>
 
-    <div class="mt-5 flex justify-center rounded-md border border-line bg-ink p-3">
-        {!! $this->qrCode() !!}
+    <div class="mt-5 flex justify-center">
+        <div class="rounded-md bg-ink p-2">
+            <img src="{{ $this->qrCode() }}" alt="2FA-QR-Code" class="h-44 w-44" />
+        </div>
     </div>
 
     <div class="mt-3 text-center">