coulomb-social/workplans/CSOC-WP-0016-mfa-setup-link.md
tegwick b8b4ee3dd1
Some checks are pending
Use-case regression gate / usecase-regressions (push) Waiting to run
Link optional authenticator setup from session details
Session details now points to the NetKingdom account page and security help.
The app does not show enrollment or require a one-time code. CSOC-WP-0016
is finished in the checkout and does not deploy this image.

Assistant: grok
Assistant-Session: 01a12cc2-e3b2-77a3-8aef-9cc60e577fee
2026-10-11 23:31:11 +02:00

39 lines
1.4 KiB
Markdown

---
id: CSOC-WP-0016
type: workplan
title: "Link authenticator setup from the coulomb.social account page"
domain: communication
repo: coulomb-social
status: finished
owner: claude-code
topic_slug: coulomb-social
created: "2026-10-11"
updated: "2026-10-11"
flavor: implementation
depends_on: []
state_hub_workstream_id: "bf60ed62-5cbb-5276-80da-6c5dec302a2e"
---
Founder finding F1 from the attended MFA run of 2026-10-11 (user-engine
`docs/evidence/2026-10-11-mfa-attended-u05-u08.md`). coulomb.social intentionally stays password-only
(KeyCape client `mfaRequired: false`), but users should be able to find optional MFA setup from the
app.
## Add "Manage authenticator app" to the session/account details
```task
id: CSOC-WP-0016-T01
status: done
priority: low
state_hub_task_id: "b8bb27c0-de32-597e-9106-c5657d7ab130"
```
On the signed-in user's session/account details page, add a "Manage authenticator app (optional)"
link to `https://pink-account.coulomb.social/` and a short line pointing to
`https://users.coulomb.social/security` for help. Do not show MFA status unless it comes from an
authoritative source. Do not make OTP required.
2026-10-11: Session details shows the optional link and the NetKingdom security
help line. The page does not display enrollment or require a one-time code.
Password sign-in is unchanged. No separate residual: the link ships with the
next app image, and this task does not deploy it.