ghost
|
d0883f9018
|
fix(auth): hash MFA backup codes (#1629)
* fix(auth): hash MFA backup codes
* fix(auth): lock and filter backup code verification
* test(auth): assert consumed backup code digest
* fix(auth): strengthen backup code handling
* fix(auth): require otp secret before mfa enable
* test(auth): assert backup code digest consumption
* fix(auth): rehash legacy MFA backup codes
* fix(auth): narrow legacy backup code migration
|
2026-05-05 01:20:57 +02:00 |
|