hsiegeln 0481cefaf4 fix: sign-in MFA flow overhaul — passkey verify, backup codes, defaults ...

Four fixes for the MFA sign-in flow:

1. Fix passkey verify crash: extract authenticationOptions from Logto
   response (was passing full response as optionsJSON). Pass
   verificationId to the verify endpoint.

2. Default to passkey verification when no MFA method preference is
   stored (was showing method picker which offered TOTP to passkey-only
   users).

3. Show backup codes after MFA enrollment: new mfaEnrollBackupCodes
   mode with copy/download buttons and confirmation checkbox. Users
   must save codes before completing sign-in.

4. Remove duplicate error alerts in enrollment screens (top-level
   alert handles all modes).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-27 20:49:32 +02:00

.gitea/workflows

fix(ci): force SNAPSHOT updates in build job Maven command

2026-04-26 20:58:06 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

audit

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

audit-screenshots

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

docker

fix: include WebAuthn in bootstrap MFA factors

2026-04-27 19:04:47 +02:00

docs

docs: implementation plan for vendor admin management and account settings

2026-04-27 14:32:46 +02:00

installer @ 531a17397b

fix: bootstrap extracts username from admin email for Logto

2026-04-25 21:03:54 +02:00

src

fix: always offer MFA+passkey enrollment, separate availability from enforcement

2026-04-27 18:59:21 +02:00

ui

fix: sign-in MFA flow overhaul — passkey verify, backup codes, defaults

2026-04-27 20:49:32 +02:00

.env.example

feat: unify admin identity — SAAS_ADMIN_USER is the email in SaaS mode

2026-04-25 20:46:24 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

chore(installer): remove generated install output, add to gitignore

2026-04-15 21:09:30 +02:00

.gitmodules

refactor: move installer to dedicated repo, wire as git submodule

2026-04-25 12:59:44 +02:00

AGENTS.md

fix: move forgot password link below sign-in button

2026-04-27 16:06:36 +02:00

ci-docker-log.txt

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

CLAUDE.md

docs: update CLAUDE.md for account package, vendor admins, and shared components

2026-04-27 15:09:41 +02:00

docker-compose.yml

refactor: move installer to dedicated repo, wire as git submodule

2026-04-25 12:59:44 +02:00

Dockerfile

fix: force SNAPSHOT updates in Docker build to resolve stale cache

2026-04-26 20:55:41 +02:00

HOWTO.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:44 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

fix: add Gitea Maven repository for cameleer-license-minter resolution

2026-04-26 19:31:27 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

9.4 MiB

Languages

Java 55.8%

TypeScript 34.7%

Shell 6.1%

HTML 2%

CSS 0.8%

Other 0.6%