mrhid6 19383abaf8 fix(auth): final-review MFA fixes F1 F2 F3 F5 F7 and drop Ticket.Attempts ...

- OIDC sessions minted through saveSignIn with AMR oidc and StepUpAt
- passwordless passkey uses ValidateDiscoverableLogin with owner-handle check
- TOTP replay guard burns the matched step, not the current one
- enrol-only tickets refused once the user already has a factor
- bootstrap owner session minted through mintSession

2026-09-16 14:26:42 +00:00

..

cmd

feat(mfa): TOTP secrets, recovery codes and factor lookup

2026-09-16 08:30:55 +00:00

internal

fix(auth): final-review MFA fixes F1 F2 F3 F5 F7 and drop Ticket.Attempts

2026-09-16 14:26:42 +00:00

Dockerfile

chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md

2026-09-10 09:18:55 +00:00

go.mod

feat(mfa): passkey verification as a second factor

2026-09-16 08:48:39 +00:00

go.sum

feat(mfa): passkey verification as a second factor

2026-09-16 08:48:39 +00:00