boban 0f5d14a252 docs: spec — split 2FA backup code into its own button + view ... Spec 1 of 2 for the 2FA challenge rework. Moves the backup (recovery) code off the combined challenge screen into a dedicated /two-factor-challenge/backup route + view, behind a 'Backup-Code verwenden' button; the main screen shows only the primary factor. A key-only user without secure context (http + bare IP) is redirected straight to the backup view. Shared rate-limit/login logic is extracted into a CompletesTwoFactorChallenge trait so both views hit one bucket set. IP-vs-domain factor routing is already correct (WebauthnService::available) and unchanged. Spec 2 (auth-failure -> fail2ban hard IP ban) is out of scope here. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-20 15:01:39 +02:00
..
plans	docs: implementation plan for clusev host CLI + short commands + help tab-URL	2026-06-19 22:45:05 +02:00
specs	docs: spec — split 2FA backup code into its own button + view	2026-06-20 15:01:39 +02:00