discourse/spec/lib/concern
Rafael dos Santos Silva 99ce75a01c
FEATURE: Allow passkeys to satisfy 2FA on /session/2fa (#39674)
Previously, the 2FA confirmation page accepted only TOTP, backup codes,
or physical security keys, so users who logged in with a passkey had no
way to use that same credential for sensitive-action confirmation.

Behind the new `allow_passkeys_for_2fa` site setting, this change lets a
passkey satisfy a 2FA challenge and auto-triggers the WebAuthn prompt on
page load so a single OS dialog confirms the action.
2026-05-06 14:47:01 -03:00
..
cached_counting_spec.rb
has_custom_fields_spec.rb FIX: do not use return in block (#26260) 2024-03-20 10:49:28 +01:00
has_search_data_spec.rb
positionable_spec.rb
searchable_spec.rb
second_factor_manager_spec.rb FEATURE: Allow passkeys to satisfy 2FA on /session/2fa (#39674) 2026-05-06 14:47:01 -03:00