Repository navigation

fix(auth): require step-up for durable user access (#360) - #607

Merged

mforce merged 9 commits into

mainfrom

fix/360-step-up-durable-access

Aug 26, 2026

Commits on Aug 26, 2026
- fix(auth): require step-up for every user creation
  mforce
  committed
  cdd25df
- fix(auth): require step-up for every password reset
  mforce
  committed
  0800d22
- fix(auth): require step-up for every role change
  mforce
  committed
  8f1f1ea
- fix(web): re-confirm every durable user-access change
  mforce
  committed
  0a1e9a0
- docs(auth): explain unconditional user-access step-up
  mforce
  committed
  f70a979
- docs(auth): remove stale selective step-up wording
  mforce
  committed
  6b7a5a7
- fix(web): guard dismissed step-up continuations
  mforce
  committed
  8bf2b0a
- test(web): cover late step-up write ownership
  mforce
  committed
  43fd92f
- test(web): cover same-target step-up reopen
  mforce
  committed
  48f9e79