mirror of
https://github.com/screentinker/screentinker.git
synced 2026-06-17 03:32:32 -06:00
users.totp_secret_enc (secretbox-encrypted, reversible) + totp_enabled + totp_last_step (replay guard), and the totp_recovery_codes table (SHA-256 hashed, single-use). Migrations default everything off so existing accounts are untouched. otplib pinned ^12 (v13 is a breaking plugin-rewrite with no authenticator/checkDelta). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| database.js | ||
| schema.sql | ||