vikingowl 515a72e6e8 feat(auth): D4 TOTP backup codes + session management ...

- Backup codes: 10 × Crockford base32 (XXXXX-XXXXX), SHA-256 hashed,
  single-use; regenerate requires current TOTP code
- Login accepts BackupCode field alongside TOTPCode
- Session management: list, revoke-by-id (ownership-checked),
  revoke-all-except-current; password change revokes other sessions
- New routes: POST /auth/2fa/backup-codes/regenerate,
  GET /auth/sessions, DELETE /auth/sessions, DELETE /auth/sessions/:id
- fakeRepo extended with backup code + session management stubs
- Tests cover: code format/count, hash storage, regen invalidates old,
  login with valid/used code, session list isolation, revoke ownership,
  password change session revocation

2026-04-26 12:33:47 +02:00

app

feat: implement full Flutter MVP app

2026-02-21 07:10:30 +01:00

backend

feat(auth): D4 TOTP backup codes + session management

2026-04-26 12:33:47 +02:00

planning

chore: remove Mistral/Ollama legacy references after Gemini migration

2026-04-25 17:31:58 +02:00

web

fix(merge-plan): snapshot proposal prop to avoid structuredClone proxy throw

2026-04-26 00:28:21 +02:00

.gitignore

chore: add .worktrees/ to .gitignore

2026-04-26 11:36:27 +02:00

.gitlab-ci.yml

ci(deploy): wire AI_AGENT_DISCOVERY and DISCOVERY_TOKEN into helm upgrade

2026-04-18 08:17:06 +02:00

.pre-commit-config.yaml

test(discovery/crawler): capture golden fixtures from five sources

2026-04-18 11:45:53 +02:00

CLAUDE.md

chore: remove Mistral/Ollama legacy references after Gemini migration

2026-04-25 17:31:58 +02:00

Justfile

fix: svelte-check needs web/.env; only fail on errors not warnings

2026-04-07 03:09:01 +02:00

Description

No description provided

1.7 MiB

Languages

Go 60.3%

Svelte 20.3%

Dart 11.1%

TypeScript 5%

PLpgSQL 1.1%

Other 2.1%