Repository navigation
Auth flows in the SPA: password recovery, MFA enrollment and callbacks #32
Description
Context
Decision 6 conditions: verify the Supabase Auth flow in the SPA (PKCE callback, refresh, logout, MFA).
Acceptance criteria
- Password recovery and email confirmation work end to end
- Users can enroll MFA (needed for aal2)
- Callback, refresh and logout covered by e2e tests
References
- apps/app/src/routes/auth.tsx
- docs/adr/0027-oss-core-and-crove-cloud.md
Activity
JOY commentedon Oct 15, 2026
Claimed by Claude Code cloud session session_013LrvuThKGaPX1uDwUiwmGQ (backlog run after the power cut), branch feat/spa-auth-flows, stacked on #91 for the e2e harness. This session has no Projects API access, so the board Status still needs to be moved to In progress by hand.
Generated by Claude Code
feat: enforce session status and fresh MFA per ADR-0028 (self-host) (#90
feat: auth flows in the SPA: PKCE callbacks, password recovery and TO…
feat: ask for a fresh second factor when R3 needs it; compose require…
feat: auth flows in the SPA: PKCE callbacks, password recovery and TO…
feat: ask for a fresh second factor when R3 needs it; compose require…
feat: auth flows in the SPA: PKCE callbacks, password recovery and TO…
feat: ask for a fresh second factor when R3 needs it; compose require…
feat: auth flows in the SPA: PKCE callbacks, password recovery and TO…
feat: ask for a fresh second factor when R3 needs it; compose require…
feat(app): ask for a second factor before changing or removing a memb…
fix(app): repeat the refused request after step-up and stop trusting …
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat(app): step-up prompt for the inbound address rotation (#32)
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat(app): step-up prompt for the inbound address rotation (#32)
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…
feat: SPA auth flows: PKCE callbacks, password recovery, TOTP MFA and…