Marc-André Bombeck ba45a25cb0 test(auth): retarget the MFA route mocks at the shared gate ...

The three unit suites that stubbed `requireCookieAuth` / `requireFreshMfa`
directly now stub `requireMfaManagementAuth`, and the password-change suite
stubs the elevation revocation the route gained. Adds the unit checks that need
no database: the elevation TTL is pinned to the cookie path's step-up window so
the two cannot drift apart, the minted value is a prefixed CSPRNG secret whose
plaintext never reaches the row, and a value carrying another credential's
prefix is refused without costing a query.

2026-07-19 13:14:38 +02:00

..

integration

test(auth): retarget the MFA route mocks at the shared gate

2026-07-19 13:14:38 +02:00