clusev

Author	SHA1	Message	Date
boban	8a8232a355	test(auth): cover TOTP+key challenge branch; clarify mount comment Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-20 15:46:37 +02:00
boban	67ce2de538	feat(auth): split backup code out of the main 2FA challenge view Mount now redirects key-only users without a secure context straight to the dedicated backup view. The main challenge form renders only for TOTP users; a subordinate button links to two-factor.challenge.backup instead of embedding the field inline. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-20 15:41:19 +02:00
boban	aa43947dcf	fix(2fa): memoize challenge pending-user lookup; assert key-only view; tidy hint wording Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 21:17:18 +02:00
boban	55d513f241	feat(2fa): challenge adapts to factor — TOTP field gated, key-only leads with the key + backup code Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 21:10:25 +02:00