null
|
896dfd8230
|
test(security): cover totpService 2FA + document Phase 1 milestone
TOTP: valid token verifies (raw + encrypted-secret path), wrong rejected,
recovery codes single-use (with normalization), challenges single-use +
expiring. Completes the Phase 1 safety net (encryption/auth/validation/
money-creators/2FA). WebAuthn full verify deferred (authenticator harness).
Suite 225 green.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
|
2026-07-05 13:05:34 -05:00 |