5ae0b7d135
WebAuthn/YubiKey as an optional login 2nd factor (web-auth/webauthn-lib), gated on domain+HTTPS. TOTP + backup codes stay the required 2FA. Register/use/remove keys in Settings + at the challenge; 2FA reset (UI + CLI) clears keys. Real YubiKey end-to-end is browser-verified on a domain host. See CHANGELOG. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| superpowers | ||
| install-update-design.md | ||
| session-handoff.md | ||
| v1-ui-review.md | ||