Lock in the behaviour the fix introduces (docs/specs/spec-005-setup-wizard.md §11 D-2): once the admin's bounded enrollment window has closed (SPEC-004 §4, A1) `admin.totp.begin` answers a clean 409 and issues no secret, rather than propagating the flow's "no pending identity" as a server fault. |
||
|---|---|---|
| .. | ||
| core | ||
| modules | ||