feat(mfa): second-factor sign-in with TOTP and recovery codes

2026-09-16 08:39:48 +00:00
parent dfcfd1d3e2
commit 2d75832ceb
6 changed files with 254 additions and 7 deletions
@@ -43,6 +43,8 @@ func RegisterRoutes(r *gin.Engine) {
 	r.GET("/auth/bootstrap-status", auth.HandleBootstrapStatus)
 	r.POST("/auth/bootstrap", auth.HandleBootstrap)
 	r.POST("/auth/login", auth.HandleLocalLogin)
+	r.POST("/auth/mfa/totp", auth.HandleMFATOTP)
+	r.POST("/auth/mfa/recovery", auth.HandleMFARecovery)
 	r.POST("/auth/logout", auth.HandleLogout)
 	r.GET("/auth/me", auth.HandleMe)
 	r.GET("/auth/oidc/:providerId/start", auth.HandleSSOStart)