Daniel Salazar 9ca77be5a9 fix(auth): require a step-up to set up 2FA and a valid code to enable it (#4051) ...

Setup returned a fresh secret and recovery codes to any session, and enable
flipped otp_enabled without proof of the secret, so a stolen session could
enroll its own authenticator and lock the owner out. Setup now lives at
/user-protected/setup-2fa behind the same password / OIDC revalidation gate as
disable-2fa, and enable requires a live code for the stored secret. The GUI
setup window asks for the password (or opens the revalidation popup) first,
and sends the code it already collected to enable.

2026-10-04 00:26:28 -07:00

..

src

fix(auth): require a step-up to set up 2FA and a valid code to enable it (#4051)

2026-10-04 00:26:28 -07:00

tests/fixtures

Add resilient PDF thumbnails to GUI uploads (#3809)

2026-09-06 13:51:02 -07:00

tools

Add resilient PDF thumbnails to GUI uploads (#3809)

2026-09-06 13:51:02 -07:00

webpack

GUI: add npm start --server=<domain> to run the GUI against a remote backend (#3481)

2026-07-30 16:29:54 -07:00

build.js

…

CREDITS.md

…

dev-server.js

feat: support dekstop app linking again (#3511)

2026-08-05 14:16:02 -07:00

package.json

Add resilient PDF thumbnails to GUI uploads (#3809)

2026-09-06 13:51:02 -07:00

puter-gui.json

Remove obsolete theme.css and its reference

2026-05-01 19:54:38 -07:00

utils.js

Add resilient PDF thumbnails to GUI uploads (#3809)

2026-09-06 13:51:02 -07:00

vitest.config.js

Dashboard: drag-to-reorder apps in the Apps tab (#3401)

2026-07-17 07:57:05 -07:00

webpack.config.cjs

…