2 Commits

Include renames

Author	SHA1	Message	Date
adamandClaude Opus 5.5	71ebed2b73	Log failed logins and refused tokens, address first ... For Guard's jarl preset and fail2ban: msg="login failed" ip=... user=... and msg="token refused" ip=..., beside the audit records. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-22 16:29:37 +01:00
abrown38andClaude Opus 5.5	8f9cdd0a17	Add two-factor login (TOTP) with recovery codes ... Users can set up an authenticator app from their account page; login then asks for a code after the password, with one-time recovery codes as a fallback. Sensitive actions (tokens, user changes, 2FA resets) need a code from the last 5 minutes. totp.require (none/admins/all) forces setup, and admins can reset a user's 2FA from the UI, the jarl CLI or jarld on the server. The dashboard and jarl status flag users missing 2FA and a shared "admin" account still in use. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 14:12:24 +00:00