boban 61df4497d7 feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path ... Guard the TOTP verifyKey call behind hasTotp() so a key-only user's null two_factor_secret never reaches Google2FA::verifyKey(); they reset via a backup code. Also adds the reset_no_2fa_note lang key (EN + DE) rendered on the forgot-password form explaining the no-2FA recovery options. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 21:26:59 +02:00
..
.gitkeep	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
ForgotPassword.php	feat(2fa): forgot-password is key-only safe + states the no-2FA recovery path	2026-06-14 21:26:59 +02:00
Login.php	feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account	2026-06-13 22:36:16 +02:00
PasswordChange.php	feat(2fa): onboarding no longer forces 2FA (only password rotation)	2026-06-14 20:44:12 +02:00
ResetPassword.php	fix(auth): toaster on auth pages + audit email-link resets	2026-06-14 17:07:52 +02:00
TwoFactorChallenge.php	fix(2fa): memoize challenge pending-user lookup; assert key-only view; tidy hint wording	2026-06-14 21:17:18 +02:00
TwoFactorSetup.php	feat(2fa): generate recovery codes on first factor + open modal; persist Settings tab in URL	2026-06-14 21:04:06 +02:00