2 Commits (21c087a11fe6bf34fc8c2d3c1cf74ac87bf274a2)

Author	SHA1	Message	Date
boban	139c376056	fix(webauthn): hash-indexed credential ids + reset keys on 2FA disable ... - credential_id can exceed the unique-index key length; store it in TEXT and enforce uniqueness on an auto-derived sha256 hash column (lookups use the hash). - Disabling 2FA now also deletes the user's security keys + backup codes, so re-enrolling starts clean and old factors never silently revive. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:40:24 +02:00
boban	78b1017844	feat(webauthn): install web-auth/webauthn-lib + credential storage ... Add web-auth/webauthn-lib ^5.3, the webauthn_credentials table (per-user unique credential_id), the WebauthnCredential model and User hasMany relation. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:18:05 +02:00