Trigger two-factor flow only when expected - #660

Merged

kasparsd merged 19 commits into

659-fix-auth-state-clear

Feb 4, 2026

Commits on Jan 10, 2025

Move to auth trigger
kasparsd
committed
8aef3df
Move to the generic authenticate filter since there we reliably know the user state
kasparsd
committed
0e1b244
Revert "Move to the generic authenticate filter since there we reliably know the user state"
kasparsd
committed
e7f1ad6
Move earlier right after the cookie check
kasparsd
committed
7a3d5ed
Fire super late since we’re replacing the rest of login flow
kasparsd
committed
0de50df
Pass the missing args
kasparsd
committed
76192e6
Add a test case for existing user session
kasparsd
committed
4eafeed
Break out for readability
kasparsd
committed
315cf26
Account for username “0”
kasparsd
committed
4c2345b
Use positive lookup for readability
kasparsd
committed
2a713ea
Describe tests for easier lookup during fails
kasparsd
committed
b9c200d
Test during API requests
kasparsd
committed
7cb84f5
Move the description to the main docblock
kasparsd
committed
cf0852b
Test the base flow
kasparsd
committed
2dd1c2f
Add back the password as the hook will provide it
kasparsd
committed
89b6829
Skip the cookies when we know we’re doing the two-factor dance
kasparsd
committed
a096066

Commits on Dec 11, 2025

Merge branch 'master' into 659-fix-auth-state-clear
kasparsd
authored
215f0c4

Commits on Jan 27, 2026

Merge branch 'master' into 659-fix-auth-state-clear
kasparsd
authored
3a0ab8b

Commits on Feb 4, 2026

Merge branch 'master' into 659-fix-auth-state-clear
kasparsd
authored
fb711c7