Transfer ownership

[LazyCat2]

No description provided.

[StupidRepo]

I think forcing the user to have 2FA before being able to transfer servers would be a good idea instead of suggesting that any account can transfer a server. 👍🏼

[insertish]

The way the 2FA flow works currently means it'll fallback to password auth if no methods are available, if we could use & specify that then this would be perfect. This would protect against situations where someone would somehow get the authentication token, but would be unlikely to have the password for example.

[StupidRepo]

This would protect against situations where someone would somehow get the authentication token, but would be unlikely to have the password for example.

Yeah, me and LazyCat talked about that on the Revolt Development server/original PR a while ago lol.

[insertish]

I don't think there are any substantial blockers that would mean we need to delay the merge here?
I would just skip procedure, I'll let the team chime in.