mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 13:01:00 +00:00
Marc-André Bombeck
36410831ed
The confirming click on both alert dialogs in the TOTP card calls preventDefault(), which is what keeps the dialog up and its button disabled while the request is in flight. Nothing took the dialog down again, so a refused rotation left the confirmation open over the card, and the card is the only place the refusal explains itself: the step-up message painted behind the overlay, inside the aria-hidden region the modal creates, with the confirm button live again. A success hid it, because the fresh-codes panel replaces the branch the dialog lives in and it unmounted anyway. Both dialogs are controlled now, and each mutation closes its own when the request settles, whichever way it went. The disable arm carried the same shape and a mistyped six-digit code there is routine, so it is fixed with it. The card test pins the sentence a step-up refusal shows and the wiring that takes the dialog down; what a person sees is asserted against a real browser in e2e/mfa-step-up-journey.spec.ts.