pad/internal/models at 5606b220076e40fd78df25f3748c186bcd4cd564 - pad

mirror of https://github.com/PerpetualSoftware/pad.git synced 2026-09-22 10:33:27 +00:00

Files

T

xarmian 0e32645bb5 feat: add TOTP two-factor authentication

Backend support for optional TOTP-based 2FA on user accounts:

- POST /auth/2fa/setup — generate TOTP secret, return QR code URI
- POST /auth/2fa/verify — verify code and enable 2FA with recovery codes
- POST /auth/2fa/disable — disable 2FA (requires password confirmation)
- POST /auth/2fa/login-verify — complete login with TOTP or recovery code
- Login returns {requires_2fa: true, user_id} when 2FA is enabled,
  requiring a second step via /auth/2fa/login-verify
- 8 recovery codes generated on setup for account recovery
- User model extended with totp_secret, totp_enabled, recovery_codes
- Refactored user queries with shared scanUser/userColumns for DRYness

Implements TASK-169 under PLAN-15 (Pad Cloud: Hardening).

2026-04-08 20:30:39 +00:00

activity.go

feat: add TOTP two-factor authentication

2026-04-08 20:30:39 +00:00

agent_role.go

feat: role board — cross-collection view, dashboard breakdown, agent bindings (#60 )

2026-04-04 07:48:33 -04:00

api_token.go

feat: add API token rotation, expiry defaults, and scope enforcement

2026-04-08 18:00:43 +00:00

collection.go

fix: schema-driven terminal statuses replace hardcoded lists (BUG-17) (#65 )