Afonso Coutinho
|
926a4c59cb
|
fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286)
* fix: fail closed when 2FA is enabled but the TOTP secret is missing
* test: totp_verify fails closed when secret missing, passes when 2FA off
|
2026-06-03 01:26:47 +09:00 |
|