boban 4ea4050c80 fix(auth): R15 review — restore one-time-code autofill, memoise pendingUser in verify ... - backup field: autocomplete=off -> one-time-code (backup codes ARE one-time codes; matches the main challenge field, the rest of the app, and the spec; restores password-manager OTP autofill that the earlier polish broke) - both verify() use the trait's memoised $this->pendingUser() instead of a fresh User::find(), saving a redundant query on the failed-attempt re-render (Pint dropped the now-unused User import in TwoFactorBackup) - spec: align trait backing-state visibility note to the implemented 'private' Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-20 16:19:40 +02:00
..
.gitkeep	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
ForgotPassword.php	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00
Login.php	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00
PasswordChange.php	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00
ResetPassword.php	fix(auth): toaster on auth pages + audit email-link resets	2026-06-14 17:07:52 +02:00
TwoFactorBackup.php	fix(auth): R15 review — restore one-time-code autofill, memoise pendingUser in verify	2026-06-20 16:19:40 +02:00
TwoFactorChallenge.php	fix(auth): R15 review — restore one-time-code autofill, memoise pendingUser in verify	2026-06-20 16:19:40 +02:00
TwoFactorSetup.php	fix(2fa): bound the backup-code reveal flag with a 10-minute TTL	2026-06-15 18:42:58 +02:00