fix(frontend): stop TOTP presence from bypassing MFA auth guard - #3331

Open

riderx wants to merge 12 commits into

mainfrom

cursor/fix-mfa-auth-guard-bypass-f0ac

Commits on Sep 14, 2026

fix(frontend): stop treating enrolled TOTP as admin-forced MFA bypass

cursoragent
and
riderx
committed
152cd59
test: fix auth MFA guard unit test typing for backend tsgo

cursoragent
and
riderx
committed
5cc7aae
chore: retrigger CI for MFA auth guard fix

cursoragent
and
riderx
committed
b067b28
chore(ci): retrigger workflow after infra flakes on MFA guard PR

cursoragent
and
riderx
committed
5f75442
test: return user profile in MFA guard mock for pass-through cases

cursoragent
and
riderx
committed
7af60b6
chore(ci): refresh tip for CodeRabbit re-review

cursoragent
and
riderx
committed
25cf9a3

Commits on Sep 23, 2026

fix(frontend): fail closed on AAL lookup errors in MFA guard

cursoragent
and
riderx
committed
2ae0150
test(frontend): cover verify_mfa RPC errors in MFA auth guard

cursoragent
and
riderx
committed
d52a6e6
test(frontend): assert verify_mfa RPC error branch in MFA guard

cursoragent
and
riderx
committed
4d5686a
chore(ci): refresh tip for CodeRabbit re-review

cursoragent
and
riderx
committed
4b69b81
chore(ci): retry CI after registry rate limit

cursoragent
and
riderx
committed
eb85f6f
chore(ci): retry CI after registry cooldown

cursoragent
and
riderx
committed
efc54d7