kolaenteandkolaente 190fab8e6d feat(api/v2): add TOTP 2FA on /api/v2 ...

Ports the current-user TOTP (2FA) endpoints from /api/v1 to the Huma-backed
/api/v2: get status, enroll, enable, and disable. Each is a custom,
current-user-scoped handler that resolves the authenticated user and refuses
non-local (OIDC/LDAP) accounts, preserving v1's local-account-only guard.

The image/jpeg QR-code endpoint is intentionally not ported here; it is a
binary-streaming route deferred to a later wave.

2026-06-10 17:58:16 +00:00

..

caldav

fix(caldav): escape user-controlled strings per RFC 5545 in VCALENDAR output

2026-04-09 15:44:04 +00:00

caldavtests

…

cmd

fix(cli): guard last admin on scheduled CLI deletion path

2026-04-20 18:55:06 +00:00

config

feat: always enable bot users

2026-05-04 10:38:53 +00:00

cron

…

db

feat(labels): let bot owners manage labels created by their bots

2026-06-09 11:40:04 +00:00

doctor

…

e2etests

test(webhook): assert bad webhook is retried in no-duplicate test

2026-04-09 09:26:04 +00:00

events

…

files

docs(api/v2): tag task attachment fields for the v2 schema

2026-06-10 10:22:39 +00:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-05-27 02:31:52 +00:00

initialize

refactor(user): remove the now-empty listeners file

2026-05-30 13:48:01 +00:00

license

fix(license): degrade to free when servers unreachable or key rejected

2026-04-20 18:55:06 +00:00

log

…

mail

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

metrics

refactor(metrics): count entities on demand with a TTL cache

2026-05-30 13:48:01 +00:00

migration

feat(time-tracking): add the time_entries table migration

2026-06-08 13:54:09 +00:00

models

docs(api/v2): tag task attachment fields for the v2 schema

2026-06-10 10:22:39 +00:00

modules

fix(api/v2): reject non-decodable images (e.g. SVG) on avatar upload with 400

2026-06-02 11:55:25 +00:00

notifications

docs(api/v2): add doc/readOnly tags to notification model fields

2026-06-07 10:05:24 +00:00

plugins

…

red

…

routes

feat(api/v2): add TOTP 2FA on /api/v2

2026-06-10 17:58:16 +00:00

swagger

[skip ci] Updated swagger docs

2026-06-09 23:32:10 +00:00

user

docs(api/v2): tag TOTP fields for the v2 schema

2026-06-10 17:58:16 +00:00

utils

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

version

…

web

refactor(task-attachment): share upload+download via pkg/web/files for v1+v2

2026-06-10 10:22:39 +00:00

websocket

feat(time-tracking): let clients subscribe to timer events

2026-06-08 13:54:09 +00:00

webtests

feat(api/v2): add TOTP 2FA on /api/v2

2026-06-10 17:58:16 +00:00

yaegi_symbols

refactor(user): remove the now-empty listeners file

2026-05-30 13:48:01 +00:00