daycry / auth / 22551289947

64%

Build Type

push

github

Committed by daycry

Commit Message

Add pending TOTP flow and local QR generation

Introduce a two-phase TOTP enrollment (PENDING → CONFIRMED) via a new TotpState enum and confirmTotp() method. Store TOTP secrets encrypted (AES) and transparently decrypt in getTotpSecret(); enableTotp() now creates a pending secret. Replace Google Charts QR URLs with locally generated PNG data URIs using endroid/qr-code (added dependency). Update UserSecurityController comments/flow to keep pending secrets on verification failure and mark confirmed on success. Adjust tests and inject a fixed Encryption key for tests; update phpstan baseline counts accordingly.

Run Details

19 of 25 new or added lines in 3 files covered. (76.0%)

1 existing line in 1 file now uncovered.

3100 of 4862 relevant lines covered (63.76%)

44.01 hits per line