Repository navigation

feat(api,web): require step-up authentication for privileged user administration (#308) - #336

Merged

mforce merged 12 commits into

mainfrom

feat/308-stepup-auth

Aug 1, 2026

Merged

feat(api,web): require step-up authentication for privileged user administration (#308)#336
mforce merged 12 commits into
mainfrom
feat/308-stepup-auth

Commits on Aug 1, 2026
- feat(api,web): require step-up authentication for privileged user administration (#308)
  mforce
  committed
  d3e4d54
- fix(api): apply the per-account lockout to /auth/step-up
  mforce
  committed
  aace4fe
- fix(api): compare step-up logout revocation at tick precision
  mforce
  committed
  7c5b3bb
- fix(api): reject a wrong step-up password with 400, not the session-expiry 401
  mforce
  committed
  ee912c6
- fix(api,web): revoke the access-token user's step-up grants on logout
  mforce
  committed
  b426f52
- fix(api): record the bearer logout even when cookie revocation throws
  mforce
  committed
  81a0026
- fix(web): clear the step-up password via the single dialog-reset path (#308)
  mforce
  committed
  748a546
- fix(api): record logout before the bulk revoke UPDATE, cover it directly
  mforce
  committed
  185ff3a
- docs(web): add step-up authentication to the in-app glossary (#308)
  mforce
  committed
  bdfe265
- Merge branch 'main' into feat/308-stepup-auth
  mforce
  committed
  50198db
- Merge branch 'main' into feat/308-stepup-auth
  mforce
  committed
  0c664dc
- fix(api): make the step-up grant admission decision atomic (#308)
  mforce
  committed
  f742921