mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 04:50:59 +00:00
Regenerating recovery codes invalidates the current set immediately, so the action now sits behind a confirmation dialog matching the disable-MFA pattern, with a consequence line spelling out that the existing codes stop working. While in the card: give the disable-step TOTP input the same digit-strip + 6-char cap and exact-length submit guard as setup, swap the static disable-code id for a useId value, and lift the copy-secret button to a 44px touch target on phones.