clusev

Commit Graph

Author	SHA1	Message	Date
boban	7afa50d253	feat(webauthn): use a security key at the login challenge When the panel runs on a domain+HTTPS and the user has a registered key, the 2FA challenge offers "Mit Security-Key anmelden" alongside the TOTP/backup-code field. A verified assertion completes login exactly like a TOTP success; rate-limit + session gate reused. TOTP and backup codes remain fully usable. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:26:58 +02:00

Author

SHA1

Message

Date

boban

7afa50d253

feat(webauthn): use a security key at the login challenge

When the panel runs on a domain+HTTPS and the user has a registered key, the 2FA
challenge offers "Mit Security-Key anmelden" alongside the TOTP/backup-code field.
A verified assertion completes login exactly like a TOTP success; rate-limit +
session gate reused. TOTP and backup codes remain fully usable.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 18:26:58 +02:00

1 Commits (bdee34ef8fb48455204cc65211b3f5b683d3adf2)