kristianwindandClaude Opus 4.8 f62ffc8d92 feat(2fa): show a scannable QR code when enabling two-factor auth ...

The setup screen showed the secret and the otpauth URI as text and asked
you to scan — with nothing to scan. It renders the URI as a QR now, an SVG
(one dark path on a white card, so it reads in either theme) generated from
the barcode encoder already in the module graph via pquerna/otp. The secret
stays below it for a device that cannot scan.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-09-03 16:27:11 +02:00

..

auth_test.go

feat(security): a TOTP code can be used once

2026-08-23 23:34:34 +02:00

password.go

feat(auth): Argon2id passwords, opaque tokens, TOTP and recovery codes

2026-08-16 23:00:28 +02:00

token.go

feat(auth): Argon2id passwords, opaque tokens, TOTP and recovery codes

2026-08-16 23:00:28 +02:00

totp.go

feat(2fa): show a scannable QR code when enabling two-factor auth

2026-09-03 16:27:11 +02:00

webauthn.go

feat(auth): passkeys, as a way in and as a second factor

2026-08-18 11:56:54 +02:00