Graham McIntire 264154a3d8 feat: implement sudo mode MFA-only verification controller ... - Add UserSudoController with GET and POST /users/sudo/verify routes - Create verify.html.heex template for TOTP verification form - Only accept TOTP codes (6 numeric digits), reject recovery codes - Update grant_sudo_mode to set authenticated_at virtual field - Exclude /users/sudo paths from return_to overwriting - Add comprehensive controller tests (12 test cases) - Verify redirect behavior, error handling, and session management 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-02-01 14:34:17 -06:00
..
2026-01-31-hibp-password-breach-checking-design.md	Add design document for HIBP password breach checking	2026-01-31 17:16:58 -06:00
2026-02-01-cloudflare-timezone-detection-design.md	Add design for Cloudflare timezone detection on signup	2026-02-01 10:56:07 -06:00
2026-02-01-cloudflare-timezone-detection.md	Move CaptureTimezone plug to browser pipeline	2026-02-01 11:15:51 -06:00
2026-02-01-sudo-mode-mfa-only-design.md	Add design doc for sudo mode MFA-only verification	2026-02-01 13:50:34 -06:00
2026-02-01-sudo-mode-mfa-only.md	feat: implement sudo mode MFA-only verification controller	2026-02-01 14:34:17 -06:00