feat(mfa): forced TOTP enrolment at sign-in

2026-09-16 08:41:56 +00:00
parent 2d75832ceb
commit 3fa469c303
3 changed files with 128 additions and 0 deletions
@@ -45,6 +45,8 @@ func RegisterRoutes(r *gin.Engine) {
 	r.POST("/auth/login", auth.HandleLocalLogin)
 	r.POST("/auth/mfa/totp", auth.HandleMFATOTP)
 	r.POST("/auth/mfa/recovery", auth.HandleMFARecovery)
+	r.POST("/auth/mfa/enrol/totp/setup", auth.HandleEnrolTOTPSetup)
+	r.POST("/auth/mfa/enrol/totp/confirm", auth.HandleEnrolTOTPConfirm)
 	r.POST("/auth/logout", auth.HandleLogout)
 	r.GET("/auth/me", auth.HandleMe)
 	r.GET("/auth/oidc/:providerId/start", auth.HandleSSOStart)