docs: add password reset and MFA implementation plan

Browse Source

12-task plan covering:
- Password reset Experience API + sign-in UI
- MFA verification at sign-in (TOTP + backup codes)
- Logto bootstrap MFA config + mfa_enrolled JWT claim
- LogtoManagementClient MFA methods
- MFA enrollment endpoints + Settings page UI
- MFA enforcement filter (APP_MFA_REQUIRED)
- Password reset security notification email
- Team page Reset MFA action
- Server handoff document

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

hsiegeln

2026-04-26 13:35:42 +02:00

parent 67f7d634c9

commit cfcf852e2d

1 changed files with 2120 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

2120

docs/superpowers/plans/2026-04-26-password-reset-mfa-plan.md Normal file

File diff suppressed because it is too large Load Diff