Repository navigation

feat(admin-auth): sign in with a password only and remove admin 2FA - #27

Open

kris1027 wants to merge 19 commits into

mainfrom

feat/defer-analytics

Open

feat(admin-auth): sign in with a password only and remove admin 2FA#27
kris1027 wants to merge 19 commits into
mainfrom
feat/defer-analytics

Commits on Oct 27, 2026
- docs(scope): defer analytics & error tracking
  
  kris1027
  and
  claude
  committed
  6722e18
- docs(specs): remove admin 2FA (spec 0019)
  
  kris1027
  and
  claude
  committed
  3ab81a9
- feat(admin-auth): replace the admin email reset with admin:reset-password
  
  kris1027
  and
  claude
  committed
  0b060e8
- feat(admin-auth): sign in with a password only and remove TOTP
  
  kris1027
  and
  claude
  committed
  2b46f82
- chore(admin-auth): turn TOTP off and update the admin runbook
  
  kris1027
  and
  claude
  committed
  4761fff
- docs(scope): mark the remove admin 2FA build done
  
  kris1027
  and
  claude
  committed
  f92211f
- docs(specs): add the verify steps for spec 0019
  
  kris1027
  and
  claude
  committed
  90c5725
- docs(specs): align spec 0019 with the reset that ends every session
  
  kris1027
  and
  claude
  committed
  6716ca7
- test(admin-auth): cover the admin password prompt, reset refusals and a failed recovery sign out
  
  kris1027
  and
  claude
  committed
  712b20b
- fix(admin-auth): look the admin up once in admin:reset-password
  
  kris1027
  and
  claude
  committed
  a2ebeec
- docs(account): drop the admin reset email and TOTP from the account notes
  
  kris1027
  and
  claude
  committed
  e81a396
- docs(specs): record the verify, test and review of spec 0019
  
  kris1027
  and
  claude
  committed
  63fcfe7
- refactor(admin-auth): import app code through @/ in the admin scripts and stack test
  
  kris1027
  and
  claude
  committed
  e4179b2
- refactor(admin-auth): answer an unknown admin as a value and run admin:reset-password end to end
  
  kris1027
  and
  claude
  committed
  fe3bf21
- refactor(email): name the store runner reset check and link by action type
  
  kris1027
  and
  claude
  committed
  4055153
- refactor(account): build the confirm failure path in one place
  
  kris1027
  and
  claude
  committed
  9523124
- fix(admin-auth): send an unreadable session token to a plain sign in, not expired
  
  kris1027
  and
  claude
  committed
  1bedb29
- docs(specs): mark specs 0004 and 0012 partly superseded by spec 0019
  
  kris1027
  and
  claude
  committed
  56376ac
- docs: drop the admin reset email and admin page password notes
  
  kris1027
  and
  claude
  committed
  3ead446

Commits

Commits on Oct 27, 2026