Marc-André Bombeck c44eed365d fix(security): revoke other sessions when the second factor is removed ...

Removing the second factor is a security-state change, so it should not leave
stale credentials behind. The disable endpoint now drops every other web
session, every native refresh token, and every trusted device, keeping only the
caller's current session. The lockout-recovery CLI does the same out of band,
clearing all sessions and trusted devices for the account.

2026-06-27 21:50:16 +02:00

..

coach-prefs

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

cycle-prefs

feat(cycle): choose cervix as the symptothermal secondary symptom

2026-06-14 15:23:26 +02:00

devices

perf(i18n,shell): ship one locale and stop blocking the first paint

2026-06-11 02:19:27 +02:00

diabetes

fix(a11y): label per-reminder toggles and wire disclosure controls

2026-06-18 22:42:04 +02:00

disable-coach

perf(i18n,shell): ship one locale and stop blocking the first paint

2026-06-11 02:19:27 +02:00

doctor-report-prefs

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

injection-site-prefs

fix(api): bound every JSON body read

2026-06-10 11:36:51 +02:00

labs-local-ocr

feat(labs): add local-OCR text mode for image-blind AI providers

2026-06-20 16:50:06 +02:00

mfa

fix(security): revoke other sessions when the second factor is removed

2026-06-27 21:50:16 +02:00

modules

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

notification-prefs

feat(notifications): MEASUREMENT_REMINDER event type and client-managed gate

2026-06-14 23:33:30 +02:00

passkey-nudge/dismiss

feat(passkeys): surface last-used, rename, and an upgrade nudge

2026-06-27 20:40:53 +02:00

research-mode

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

security-activity

feat(security): list active sessions, sign out everywhere, and show security activity

2026-06-27 20:34:43 +02:00

sessions

feat(security): list active sessions, sign out everywhere, and show security activity

2026-06-27 20:34:43 +02:00

source-priority

fix(api,lib): consent before reuse, tighter inputs and caches that tell on themselves

2026-06-11 23:20:38 +02:00

timezone

perf(i18n,shell): ship one locale and stop blocking the first paint

2026-06-11 02:19:27 +02:00

trusted-devices

feat(auth): allow trusting a device to skip the second factor

2026-06-27 21:49:39 +02:00

unit-preference

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

route.ts

feat(security): let an operator require a second factor

2026-06-27 21:49:53 +02:00