supabase / auth / 35616231916

72%

push

github

fix(mfa): ignore verify-disabled factors in recovery codes guard (#2824)

When a user has a second factor enrolled but verification has been
disabled at the configuration level, we should not allow the enrollment
of recovery codes as that would make the recovery codes the only usable
second factor.

11 of 11 new or added lines in 2 files covered. (100.0%)

16668 of 23256 relevant lines covered (71.67%)

495.92 hits per line