Add TOTP MFA support#21

Merged

sidhujag merged 8 commits into

mainfrom

feature/totp-2fa

Apr 25, 2026

Commits on Apr 25, 2026

feat(auth): add TOTP MFA support
jagdeep sidhu
committed
fix(auth): add forward migration for TOTP tables
jagdeep sidhu
committed
fix(auth): scope TOTP login rate limiting by challenge
jagdeep sidhu
committed
chore(auth): keep TOTP schema in v1 init
jagdeep sidhu
committed
fix(auth): require password step-up for TOTP enrollment
jagdeep sidhu
committed
fix(auth): invalidate stale MFA login challenges
jagdeep sidhu
committed
fix(auth): harden MFA limiter and recovery consumption
jagdeep sidhu
committed
fix(auth): consume recovery code before session issue
jagdeep sidhu
committed