secubox-deb/packages/secubox-portal/debian
CyberMind-FR 3790cf225e feat(portal): full in-browser TOTP flow in login.html (mfa + enrollment + backup codes)
Makes the admin-2FA ON state usable without the API. login.html branches on the
auth response: mfa_required -> code step (/login/mfa, backup codes ok);
enrollment_required -> QR + manual key + confirm (/totp/enroll, /totp/confirm)
then one-time backup codes; access_token -> straight in. Verified live end-to-end
on gk2 (enroll->confirm->re-login->mfa).

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-11 07:01:39 +02:00
..
changelog feat(portal): full in-browser TOTP flow in login.html (mfa + enrollment + backup codes) 2026-07-11 07:01:39 +02:00
control
postinst
prerm
rules
secubox-portal.service
secubox.yaml