chore: migrate 2FA TOTP DDP methods to /v1/users.totp.* REST endpoints - #40734

Merged

ggazzo merged 10 commits into

chore/ddp-migrate-batch5-2fa

Jul 24, 2026

Commits on Jul 17, 2026

chore: migrate 2FA TOTP DDP methods to REST endpoints

ggazzo
and
claude
committed
719da2c
fix(api): address review feedback on TOTP REST endpoints
ggazzo
committed
53fb2ea
fix(api): correct checkCodesRemaining import paths after backend reorg
ggazzo
committed
3d37909
test(api): cover TOTP REST endpoints (enable/validate/regenerate/disable/codesRemaining)
ggazzo
committed
92a0557
fix(api): correct 2fa import paths after develop reorg (2fa→server/lib/2fa, logger/notifyListener moved)
ggazzo
committed
a14bb99
fix(security): rate-limit all TOTP REST endpoints (enable/codesRemaining) to prevent brute-force
ggazzo
committed
6116341
chore: fix import order and prettier formatting
ggazzo
committed
ddc6761
fix(security): require 2FA to enroll TOTP (enableTotp/validateTotp)
ggazzo
committed
335d8e0
test(api): enable 2FA + password fallback so TOTP twoFactorRequired tests challenge
ggazzo
committed
f53a974
test(api): simplify TOTP tests — TEST_MODE bypasses the 2FA gate
ggazzo
committed
6cf199e