3 people acbf49018f [web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo (#7563) ...

* 2FA using userVerificationToken

* Fix 2FA Yubikeys

* TwoFactor.find_by_user_and_type take enum parameter not i32

* log_user_event take enum parameter not i32

* Fix 2fa webauthn

* Prevent 2FA claims reuse

* 2fa webauthn return keys when deleting

* 2fa reset twofactor_remember

* Reject 2FA verification tokens issued for another provider

The Email and Duo claims only have optional fields, so a userVerificationToken minted for another
provider deserialized into them and was accepted. Each provider's claims now reject unknown fields,
with a test that every token only parses as its own provider.

Also fix the email 2FA login in the Playwright user setup, which used an undefined `mailBuffer`.

---------

Co-authored-by: Timshel <timshel@users.noreply.github.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>

2026-10-06 23:45:55 +02:00

..

2fa.ts

[web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo (#7563)

2026-10-06 23:45:55 +02:00

admin.ts

Fix playwright test (#7548)

2026-08-05 21:29:41 +02:00

db-setup.ts

SSO using OpenID Connect (#3899)

2025-08-08 23:22:22 +02:00

db-teardown.ts

Fix playwright test (#7548)

2026-08-05 21:29:41 +02:00

db-test.ts

SSO using OpenID Connect (#3899)

2025-08-08 23:22:22 +02:00

orgs.ts

Fix playwright test (#7548)

2026-08-05 21:29:41 +02:00

sso-setup.ts

SSO using OpenID Connect (#3899)

2025-08-08 23:22:22 +02:00

sso-teardown.ts

Fix playwright test (#7548)

2026-08-05 21:29:41 +02:00

sso.ts

Fix playwright test (#7548)

2026-08-05 21:29:41 +02:00

user.ts

[web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo (#7563)

2026-10-06 23:45:55 +02:00