jevb 90b4f268e2 feat: TOTP 2FA settings UI, server hardening, full validation pass ...

Client:
- Add TOTP enrollment/disable UI in Settings > Account (AccountTab.ts)
- Fix api.ts enableTotp/confirmTotp/disableTotp to require password param
- Add totp_enabled field to UserWithRole type
- Wire SettingsOverlay TOTP callbacks through MainPage and ConnectPage
- 27 new tests: totp-settings (18), api TOTP methods (6), auth store (3)

Server:
- Fix targetBoolSetting to default false on ErrNotFound (fresh DB compat)
- Fix admin settings test: boolean keys use valid values, not "testvalue"
- Add require_2fa validation to settings handler (normalizeSettingUpdates)
- Remove unused authenticateAdmin from logstream.go

Docs:
- Mark DOCUMENTATION_AUDIT Critical Finding #1 as RESOLVED
- Update CLAUDE.md Key Features with 2FA/TOTP bullet
- Update CLIENT-ARCHITECTURE.md with TOTP components
- Update CHATSERVER.md login flow and rate limiting table
- Create session log, update task tracking (T-192–T-201)

2026-03-29 21:31:18 +02:00

..

account.go

fix: resolve all 11 open bugs, add account deletion, harden security

2026-03-28 13:21:07 +01:00

admin_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

admin_queries.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

attachment_queries_test.go

fix: resolve 1 critical and 5 high security/reliability issues from go-review

2026-03-19 03:53:40 +01:00

attachment_queries.go

fix: virtual scroll jumping with images/GIFs

2026-03-21 12:34:31 +01:00

auth_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

auth_queries.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

backup_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

channel_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

channel_queries.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

db_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

db.go

refactor: context propagation, LogAudit deadlock fix, ESLint v9, code quality

2026-03-29 19:39:46 +02:00

dm_queries_test.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

dm_queries.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

errors.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

invite_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

message_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

message_queries.go

refactor: deduplicate pin handler and DB scan logic

2026-03-21 21:42:14 +01:00

migrate_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

migrate.go

fix: address code review — 8 issues across server and client

2026-03-24 21:35:40 +01:00

models.go

fix: virtual scroll jumping with images/GIFs

2026-03-21 12:34:31 +01:00

role_invite_queries_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

role_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

voice_queries_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

voice_queries.go

fix: security hardening, LiveKit class refactor, and eng review fixes

2026-03-21 11:59:14 +01:00