Afonso Coutinho 926a4c59cb fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286) ...

* fix: fail closed when 2FA is enabled but the TOTP secret is missing

* test: totp_verify fails closed when secret missing, passes when 2FA off

2026-06-03 01:26:47 +09:00

21 KiB

Raw Blame History

View Raw