clusev

Commit Graph

Author	SHA1	Message	Date
boban	61df4497d7	feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path Guard the TOTP verifyKey call behind hasTotp() so a key-only user's null two_factor_secret never reaches Google2FA::verifyKey(); they reset via a backup code. Also adds the reset_no_2fa_note lang key (EN + DE) rendered on the forgot-password form explaining the no-2FA recovery options. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 21:26:59 +02:00

Author

SHA1

Message

Date

boban

61df4497d7

feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path

Guard the TOTP verifyKey call behind hasTotp() so a key-only user's null
two_factor_secret never reaches Google2FA::verifyKey(); they reset via a
backup code. Also adds the reset_no_2fa_note lang key (EN + DE) rendered
on the forgot-password form explaining the no-2FA recovery options.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 21:26:59 +02:00

1 Commits (5b1e7e51688fe0d33107a70c31bb39c811b7162d)