towerops/lib/towerops_web
Graham McIntire 264154a3d8
feat: implement sudo mode MFA-only verification controller
- Add UserSudoController with GET and POST /users/sudo/verify routes
- Create verify.html.heex template for TOTP verification form
- Only accept TOTP codes (6 numeric digits), reject recovery codes
- Update grant_sudo_mode to set authenticated_at virtual field
- Exclude /users/sudo paths from return_to overwriting
- Add comprehensive controller tests (12 test cases)
- Verify redirect behavior, error handling, and session management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-01 14:34:17 -06:00
..
channels agent overhaul 2026-01-30 16:05:23 -06:00
components paginate audit logs 2026-02-01 13:27:56 -06:00
controllers feat: implement sudo mode MFA-only verification controller 2026-02-01 14:34:17 -06:00
helpers test improvements 2026-01-18 17:15:44 -06:00
live show cloud poller device count 2026-02-01 13:41:01 -06:00
plugs Use detected timezone from session in user registration 2026-02-01 12:18:33 -06:00
endpoint.ex Move CaptureTimezone plug to browser pipeline 2026-02-01 11:15:51 -06:00
gettext.ex init 2025-12-21 11:10:43 -06:00
router.ex feat: implement sudo mode MFA-only verification controller 2026-02-01 14:34:17 -06:00
telemetry.ex fix: add Oban config to dev.exs and replace Exq telemetry with Oban 2026-01-24 16:39:45 -06:00
user_auth.ex feat: implement sudo mode MFA-only verification controller 2026-02-01 14:34:17 -06:00