fix: MFA-enforced accounts leak enumeration via passwordless login guard order - #154

Open

smarcet wants to merge 13 commits into

feat/mfa-phase1---migrations--and--interfacesfrom

fix/passwordless-mfa-enumeration

Commits on Jun 8, 2026

feat: Add MultiFactor Authentication
matiasperrone-exo
committed
700c01f
chore: Add PR's requested changes and additional AI comments
matiasperrone-exo
committed
e85d9d0
chore: Add PR's requested changes
matiasperrone-exo
committed
6247b83
chore: Add guards on setEventType and setMethod methods on TwoFactorAuditLog model
matiasperrone-exo
committed
f48e246
chore: Guard the unique-index migration against existing duplicates.
matiasperrone-exo
committed
717dcbd
chore: Add UniqueConstraint annotation to mirror the database migration
matiasperrone-exo
committed
e1a6801
chore: Refactor UserRecoveryCode and TwoFactorAuditLog models; update migration for user_recovery_codes
matiasperrone-exo
committed
3501297
chore: remove BaseEntity oveloaded props and methods. fix skipped test
matiasperrone-exo
committed
30b1fb2
chore: unify migrations
matiasperrone-exo
committed
ed53348

Commits on Aug 11, 2026

Feature | Implement Two-Factor Authentication (2FA) support for users (#126)

authored
68a6c8d

Commits on Aug 12, 2026