fcb25778e1
Two bugs in the sign-in UI's TOTP MFA enrollment flow: 1. Auth app displayed the PC hostname and "Platform Owner" instead of "Cameleer" and the user's email. The sign-in UI was rendering Logto's pre-generated QR code which uses the ENDPOINT hostname as issuer. Now generates our own otpauth:// URI with proper branding, rendered client-side via qrcode.react. 2. TOTP code verification returned 400 "Invalid TOTP code". The verifyTotpSetup() call was missing the required verificationId parameter — Logto's Experience API needs it to locate the pending secret during enrollment. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
26 lines
571 B
JSON
26 lines
571 B
JSON
{
|
|
"name": "cameleer-sign-in",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"preview": "vite preview"
|
|
},
|
|
"dependencies": {
|
|
"@cameleer/design-system": "^0.1.54",
|
|
"@simplewebauthn/browser": "^13.3.0",
|
|
"qrcode.react": "^4.2.0",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@vitejs/plugin-react": "^4.4.0",
|
|
"typescript": "^5.9.0",
|
|
"vite": "^6.3.0"
|
|
}
|
|
}
|