NextMyDay/internal/core/server
Claus Lohmar 34f8ddbcfe test(setup): pin the closed-window refusal on the TOTP step
Lock in the behaviour the fix introduces (docs/specs/spec-005-setup-wizard.md
§11 D-2): once the admin's bounded enrollment window has closed (SPEC-004 §4,
A1) `admin.totp.begin` answers a clean 409 and issues no secret, rather than
propagating the flow's "no pending identity" as a server fault.
2026-10-15 07:08:31 +00:00
..
authflow.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
enroll_login_test.go fix(setup): render the TOTP step instead of the enroll flow's JSON 2026-10-15 07:07:31 +00:00
handlers.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
recoveryflow.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
registry.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
requestcontext.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
roles.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
roles_test.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
server.go feat(setup): gate setup with the config toggle and an optional code 2026-10-15 06:47:33 +00:00
server_test.go feat(setup): gate setup with the config toggle and an optional code 2026-10-15 06:47:33 +00:00
setup_code_test.go feat(setup): gate setup with the config toggle and an optional code 2026-10-15 06:47:33 +00:00
setup_wizard_test.go test(setup): pin the closed-window refusal on the TOTP step 2026-10-15 07:08:31 +00:00
setupflow.go feat(setup): gate setup with the config toggle and an optional code 2026-10-15 06:47:33 +00:00
spec006_passkey_nudge_test.go fix(security): gate /setup per request and pin the setup module 2026-10-14 11:30:13 +00:00
spec007_recovery_test.go feat(server): gate /setup by the direct tunnel and trust the proxy scheme 2026-10-15 05:40:36 +00:00
spec008_modules_test.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
spec009_web_pwa_test.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00
static.go feat(core): add the store, identity plumbing and the door (SPEC-003/004) 2026-10-14 10:53:51 +00:00