add TOTP two-factor authentication with recovery codes#8

Merged

9cb14c1ec0 merged 6 commits intomasterfrom

Feb 23, 2026

Commits on Feb 23, 2026

add TOTP two-factor authentication with recovery codes

9cb14c1ec0
and
claude
committed
add brute-force protection to TOTP verification endpoint

9cb14c1ec0
and
claude
committed
validate TOTP encryption key and add env var to config templates

9cb14c1ec0
and
claude
committed
offload recovery code hashing to threads and use bulk_create

9cb14c1ec0
and
claude
committed
move TOTP attempt tracking from in-memory dict to database

9cb14c1ec0
and
claude
committed
offload recovery code verification to thread in verify_login_code

9cb14c1ec0
and
claude
committed