tlmanz / authkit / 28509238279

63%

push

github

feat: implement trusted devices for 2FA, allowing users to skip TOTP on remembered devices

- Added TrustedDeviceStore to Config for managing trusted devices.
- Updated Login flow to skip TOTP if the device is trusted.
- Introduced endpoints for managing trusted devices, including revocation on password change and logout.
- Enhanced TOTP enrollment process to confirm pending secrets upon successful verification.
- Created account management endpoints for changing passwords, logging out everywhere, and managing 2FA.
- Added tests for new functionality, ensuring correct behavior for enrollment and confirmation of 2FA.

58 of 312 new or added lines in 6 files covered. (18.59%)

1375 of 2175 relevant lines covered (63.22%)

6.35 hits per line