2 Commits

Author	SHA1	Message	Date
saravanakumardb1	b0e1a54481	fix(auth): enterprise SSO bcrypt hash + upgrade cost 10→12 ... - Enterprise SAML/OIDC callbacks used raw 'sso_xxx' string as passwordHash which would crash bcrypt.compare(). Now uses userRepo.hashPassword(randomUUID()) - Added updateLastLogin() for existing enterprise SSO users - Upgraded bcrypt cost factor from 10 to 12 per PRD spec - All 53 auth tests passing	2026-03-12 15:35:00 -07:00
saravanakumardb1	f4b9124065	feat(auth): add Phase 5C-5E endpoints + SDK methods — TOTP secret, push approvals, QR auth ... - GET /auth/mfa/totp/secret — retrieve decrypted TOTP secret for auth app - POST /auth/mfa/push/create, GET /pending, POST /:id/respond, GET /:id/status - POST /auth/qr/create, POST /auth/qr/confirm, GET /auth/qr/:id/status - Kotlin SDK: getTotpSecret, getPendingApprovals, respondToApproval, confirmQrLogin - Swift SDK: getTotpSecret, getPendingApprovals, respondToApproval, confirmQrLogin - All 53 auth tests passing	2026-03-12 15:01:51 -07:00