boban 61df4497d7 feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path ... Guard the TOTP verifyKey call behind hasTotp() so a key-only user's null two_factor_secret never reaches Google2FA::verifyKey(); they reset via a backup code. Also adds the reset_no_2fa_note lang key (EN + DE) rendered on the forgot-password form explaining the no-2FA recovery options. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 21:26:59 +02:00
..
Console/Commands	fix(webauthn): counter zero only when stored is zero + CLI clears keys	2026-06-14 18:47:07 +02:00
Events	fix(blade): garbled header on every signed-in page + private metrics channel (v0.4.1)	2026-06-14 08:34:07 +02:00
Http	feat(2fa): onboarding no longer forces 2FA (only password rotation)	2026-06-14 20:44:12 +02:00
Jobs	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Livewire	feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path	2026-06-14 21:26:59 +02:00
Models	feat(2fa): pluggable factor semantics on User (hasTotp, either-factor, resetIfNoFactor)	2026-06-14 20:38:36 +02:00
Providers	feat(domain): change the panel domain from the dashboard (v0.4.0)	2026-06-14 01:38:16 +02:00
Services	fix(services): cap live journal at 200 rows in a scrollable, auto-sticking box	2026-06-14 20:58:48 +02:00
Support	fix(webauthn): counter zero only when stored is zero + CLI clears keys	2026-06-14 18:47:07 +02:00