towerops/docs
Graham McIntire 264154a3d8
feat: implement sudo mode MFA-only verification controller
- Add UserSudoController with GET and POST /users/sudo/verify routes
- Create verify.html.heex template for TOTP verification form
- Only accept TOTP codes (6 numeric digits), reject recovery codes
- Update grant_sudo_mode to set authenticated_at virtual field
- Exclude /users/sudo paths from return_to overwriting
- Add comprehensive controller tests (12 test cases)
- Verify redirect behavior, error handling, and session management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-01 14:34:17 -06:00
..
plans feat: implement sudo mode MFA-only verification controller 2026-02-01 14:34:17 -06:00
FUTURE_IMPROVEMENTS.md filter more honeybadger alerts, format dates to users time zone, email template cleanup 2026-02-01 09:27:42 -06:00
PANGOLIN_SECURITY.md Add comprehensive Pangolin security rules 2026-01-15 12:25:21 -06:00
security-analysis.md Add firmware version tracking system 2026-02-01 10:46:27 -06:00
version_tracking.md Add firmware version tracking system 2026-02-01 10:46:27 -06:00