feat: add TOTP multifactor authentication

2026-08-07 13:10:05 -04:00
parent 4777a3abd5
commit e67c3d4cdb
50 changed files with 6646 additions and 539 deletions
@@ -41,6 +41,10 @@ ORIGIN=https://dev.shd.build
 # accessing development directly at http://localhost:5173.
 PASSKEY_RP_ID=shd.build

+# One to three comma-separated key-id:canonical-base64url-32-byte-key entries.
+# The first key is used for new MFA TOTP factors; retain old keys for rotation.
+MFA_TOTP_ENCRYPTION_KEYS=
+
 # SMTP delivery for email verification and magic-link authentication.
 # Port 465 normally uses SMTP_SECURE=true. Port 587 normally uses false and STARTTLS.
 SMTP_HOST=