ghost d0883f9018 fix(auth): hash MFA backup codes (#1629) ...

* fix(auth): hash MFA backup codes

* fix(auth): lock and filter backup code verification

* test(auth): assert consumed backup code digest

* fix(auth): strengthen backup code handling

* fix(auth): require otp secret before mfa enable

* test(auth): assert backup code digest consumption

* fix(auth): rehash legacy MFA backup codes

* fix(auth): narrow legacy backup code migration

2026-05-05 01:20:57 +02:00

8.8 KiB

Raw Blame History

View Raw