boban 139c376056 fix(webauthn): hash-indexed credential ids + reset keys on 2FA disable ... - credential_id can exceed the unique-index key length; store it in TEXT and enforce uniqueness on an auto-derived sha256 hash column (lookups use the hash). - Disabling 2FA now also deletes the user's security keys + backup codes, so re-enrolling starts clean and old factors never silently revive. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 18:40:24 +02:00
..
Index.php	fix(webauthn): hash-indexed credential ids + reset keys on 2FA disable	2026-06-14 18:40:24 +02:00
WebauthnKeys.php	fix(webauthn): validate the key label before the browser ceremony	2026-06-14 18:35:25 +02:00