2 Commits

Author	SHA1	Message	Date
Gerhard Scheikl	f68fd22d2b	fix(auth): cascade-delete MFA recovery codes on user removal	2026-05-31 22:00:52 +02:00
Gerhard Scheikl	e14e909700	feat(auth): mandatory 2FA (TOTP + WebAuthn passkeys) with hard enrollment gate, AAL2 step-up, and single-use recovery codes	2026-05-31 21:38:01 +02:00