sockeye

Go to file

John Cardinal f7c1d7c856 case 4710 - 2FA step requires the temp token from the password step

Same fix as AyaNova (raven 141bdeb8): the 2FA step matched the user by temp
token alone and the token was left empty after a 2FA login, so an empty or
missing token skipped the password step. Now an empty or missing temp token is
refused, the token is cleared to null after success, and after 5 wrong codes
the password must be entered again.

Checked on the local server with a temporary user (removed afterwards): no or
empty temp token 401; normal sign in 200; 5 wrong codes then the right code 401;
new password entry 200.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 11:36:45 -07:00

.vscode

case 4670 updated all packages, unit tests resign works all green, booted and generated v7 and v8 keys that were then consumed without error in the v8 and v7 test clients, everything license related seems ok at this point, will do more testing of other things updated

2026-09-25 13:19:01 -07:00

dist/assets/linux-server

2022-12-16 06:01:56 +00:00

graphics

2022-12-29 22:21:59 +00:00

server

case 4710 - 2FA step requires the temp token from the password step

2026-10-24 11:36:45 -07:00

sockeye.tests