managarten/apps
Till JS f5a9edcfb6 feat(auth): add TOTP two-factor authentication across all apps
Uses Better Auth's built-in twoFactor plugin for TOTP + backup codes:

Backend (mana-core-auth):
- twoFactor plugin in better-auth.config.ts (issuer: ManaCore)
- twoFactorEnabled field on users table, backupCodes as encrypted text
- 2FA redirect detection in signIn flow
- Passthrough controller forwards /two-factor/* to Better Auth
- Security event types for 2FA operations

Client (shared-auth):
- enableTwoFactor, disableTwoFactor, verifyTwoFactor, verifyBackupCode,
  generateBackupCodes methods with session-to-token exchange

UI (shared-auth-ui):
- LoginPage: 2FA code input view after password login, backup code toggle
- TwoFactorSetup: settings component with enable/disable/QR code/backup codes

App integration:
- All 19 auth stores have verifyTwoFactor() and verifyBackupCode()
- All 19 login pages pass onVerifyTwoFactor and onVerifyBackupCode callbacks
- ManaCore settings page has TwoFactorSetup component

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 19:55:09 +01:00
..
calendar feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
chat feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
citycorners feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
clock feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
contacts feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
context feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
docs fix: replace all manacore.app URLs with mana.how 2026-03-22 18:40:37 +01:00
manacore feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
manadeck feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
matrix feat(apps): add missing help, feedback, profile, themes, auth pages for cross-app consistency 2026-03-26 14:33:34 +01:00
mukke feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
nutriphi feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
photos feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
picture feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
planta feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
playground feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
presi feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
questions feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
skilltree feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
storage feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
todo feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00
traces feat: add unified @manacore/shared-llm package and migrate all backends 2026-03-23 22:06:30 +01:00
zitare feat(auth): add TOTP two-factor authentication across all apps 2026-03-26 19:55:09 +01:00