mrhid6 b1193c59e3 fix(auth): log why a passkey ceremony was refused ...

Every WebAuthn refusal answered "that passkey could not be verified" and
discarded the library's error, leaving a misconfigured relying party
undiagnosable. Log the stage, the derived RP ID and expected origin, the
request's Origin and X-Forwarded-Proto, and the library error with its
DevInfo. None of it is secret.

2026-09-16 14:51:55 +00:00

..

cmd

feat(mfa): TOTP secrets, recovery codes and factor lookup

2026-09-16 08:30:55 +00:00

internal

fix(auth): log why a passkey ceremony was refused

2026-09-16 14:51:55 +00:00

Dockerfile

chore: replace em dashes with hyphens, add no-em-dash rule to CLAUDE.md

2026-09-10 09:18:55 +00:00

go.mod

feat(mfa): passkey verification as a second factor

2026-09-16 08:48:39 +00:00

go.sum

feat(mfa): passkey verification as a second factor

2026-09-16 08:48:39 +00:00