mirror of
https://github.com/HeyPuter/puter.git
synced 2026-08-27 08:27:43 +00:00
The disable path clears window.user.otp (in UIWindowDisable2FA), but the enable path updated only the card's DOM, never the in-memory flag. TabSecurity html() reads user.otp to decide the toggle/badge state, so after enabling 2FA a re-render of the Security tab from the cached window.user showed it as disabled for an account that actually had 2FA on. Set window.user.otp = enabling on success so both directions stay consistent.