Repository navigation

feat(mfa): push sign-in approval with the RustMFA app (backend) - #13

Open

pierrejochem wants to merge 24 commits into

mainfrom

feat/push-mfa

Open

feat(mfa): push sign-in approval with the RustMFA app (backend)#13
pierrejochem wants to merge 24 commits into
mainfrom
feat/push-mfa

Commits on Nov 8, 2026
- docs: ADR 0014 push sign-in approval, accepted; plan M14
  pierrejochem
  committed
  054f567
- feat(mfa): [mfa] settings and AppState wiring (ADR 0014)
  pierrejochem
  committed
  9ee5173
- feat(mfa): schema and repository (ADR 0014)
  pierrejochem
  committed
  2af311b
- feat(mfa): key attestation verification (ADR 0014)
  pierrejochem
  committed
  4c63708
- chore: ignore .openidea folder
  pierrejochem
  committed
  00e7364
Commits on Nov 9, 2026
- feat(mfa): device enrollment
  pierrejochem
  committed
  f697bd7
- feat(mfa): device request authentication
  pierrejochem
  committed
  66bfdc3
- feat(mfa): challenges with number matching
  pierrejochem
  committed
  3341cd0
- feat(mfa): device management and audit view
  pierrejochem
  committed
  e0addc6
- feat(mfa): device HTTP API
  pierrejochem
  committed
  c97b2c0
Commits on Nov 10, 2026
- deps: update zstd to 0.13.4 and zstd-safe to 7.4.0
  pierrejochem
  committed
  c92be81
- ci: tolerate litmus put_no_parent deviation
  pierrejochem
  committed
  e9aff3f
- test(mfa): allow one second of clock skew in the lifetime test
  pierrejochem
  committed
  f641103
- docs(mfa): changelog, security, admin, state
  pierrejochem
  committed
  048be57
- feat(mfa): an enrolled phone is a second factor
  pierrejochem
  committed
  2fbb20f
- build(mfa): pin rustmfa-contract by git revision
  pierrejochem
  committed
  ceef962
- build(mfa): license the contract, accept RUSTSEC-2026-0387 for it
  pierrejochem
  committed
  f0ee1f5
- feat(mfa): bind a challenge to one sign-in and release it once
  pierrejochem
  committed
  611e06c
- feat(mfa): approve a browser sign-in on the phone
  pierrejochem
  committed
  3411813
- feat(mfa): approve a Login Flow v2 sign-in on the phone
  pierrejochem
  committed
  165394d
- feat(mfa): enroll and revoke phones in the web interface
  pierrejochem
  committed
  03fd311
- feat(mfa): FCM push adapter
  pierrejochem
  committed
  f4fa7fd
- feat(mfa): phone blocks on the lockouts page
  pierrejochem
  committed
  10322b8
- fix(mfa): recovery of phone-only users, stronger checks on the only factor, one approval per sign-in
  pierrejochem
  committed
  c35a8a0

Commits

Commits on Nov 8, 2026

Commits on Nov 9, 2026

Commits on Nov 10, 2026