TyperBody a40051daf1 feat(auth): add TOTP (RFC 6238) second factor with recovery codes ...

- store the per-Account shared secret encrypted at rest (Fernet keyed off
  the instance JWT secret via HKDF); never persist it in plaintext
- store recovery codes only as salted PBKDF2-HMAC-SHA256 digests
- add TotpService covering enrol / verify / disable and recovery-code use
- expose the login second-factor challenge (code `totp_required`) and the
  recovery-code path in the auth / reset flows
- add the `totp_credentials` migration (0025, revises 0024_passkey_credentials)
- web: TOTP challenge step on login, TOTP / recovery-code methods on
  reset-password, TotpEnrollDialog in account settings, i18n for all locales

2026-09-13 00:01:54 +08:00

..

libs

fix(dingtalk): restore card auto layout (#2491)

2026-09-01 17:56:02 +08:00

pkg

feat(auth): add TOTP (RFC 6238) second factor with recovery codes

2026-09-13 00:01:54 +08:00

templates

fix(pipelines): show the actual sandbox scope restriction (#2527)

2026-09-11 14:42:38 +08:00

__init__.py

fix(release): derive package version from metadata

2026-06-22 21:10:33 -04:00

__main__.py

docs: update published documentation links (#2509)

2026-09-05 00:55:18 +08:00