Enforce login freshness in KeyCape instead of forwarding prompt=login (KEY-WP-0033).
acceptance.yaml #68 -Commit
11ce29af8b
pushed by
tegwick
Register informed-decision-sitting-requester as create-only.
image.yaml #67 -Commit
1620ce2edd
pushed by
tegwick
Register informed-decision-sitting-requester as create-only.
acceptance.yaml #66 -Commit
1620ce2edd
pushed by
tegwick
Implement scoped P06 authentication policy and guarded optional onboarding
image.yaml #65 -Commit
e0b3c25f06
pushed by
tegwick
Implement scoped P06 authentication policy and guarded optional onboarding
acceptance.yaml #64 -Commit
e0b3c25f06
pushed by
tegwick
Implement P05 checked services and safe selected delivery recovery
image.yaml #63 -Commit
aa709fb854
pushed by
tegwick
Implement P05 checked services and safe selected delivery recovery
acceptance.yaml #62 -Commit
aa709fb854
pushed by
tegwick
Refuse multi-owner factors and lock ownership during recovery
acceptance.yaml #61 -Commit
63b3070853
pushed by
tegwick
Reconcile recovery by support reference and bound provider lookup
acceptance.yaml #60 -Commit
d15f4dde0b
pushed by
tegwick
Connect P04 audited recovery to fresh-MFA platform browser flow
acceptance.yaml #59 -Commit
cb51584f58
pushed by
tegwick
Verify factor identity again after recovery mutation
acceptance.yaml #58 -Commit
4d893ed3c2
pushed by
tegwick
Implement audited lost-factor recovery and track remaining P04 acceptance
acceptance.yaml #57 -Commit
3b7df9047e
pushed by
tegwick
Record verified enrollment assurance release and automate provider contract tests
acceptance.yaml #56 -Commit
ecca6cb4ba
pushed by
tegwick
Verify reader scope before accepting absence of enrolled factors
image.yaml #55 -Commit
113f3a6296
pushed by
tegwick
Verify reader scope before accepting absence of enrolled factors
acceptance.yaml #54 -Commit
113f3a6296
pushed by
tegwick
Require confirmed enrollment and genuine OTP evidence for MFA
image.yaml #53 -Commit
122a0d1369
pushed by
tegwick
Require confirmed enrollment and genuine OTP evidence for MFA
acceptance.yaml #52 -Commit
122a0d1369
pushed by
tegwick
Support provider credential renewal and reject unsuccessful OTP validation
image.yaml #51 -Commit
632b1f1376
pushed by
tegwick
Support provider credential renewal and reject unsuccessful OTP validation
acceptance.yaml #50 -Commit
632b1f1376
pushed by
tegwick
Support opt-in MFA per browser client with authoritative enrollment checks
image.yaml #49 -Commit
ac8ed65203
pushed by
tegwick
Allow registered provider redirects after sign-out confirmation
image.yaml #48 -Commit
4d8b8fe934
pushed by
tegwick
Preserve browser Origin on the confirmed sign-out form
image.yaml #47 -Commit
91efb6d988
pushed by
tegwick
Add central login recovery and confirmed shared sign-out
image.yaml #46 -Commit
074c2ce498
pushed by
tegwick
Forward fresh-login requirements to the authentication provider
image.yaml #45 -Commit
8d4336e944
pushed by
tegwick
Close G10, the last of the ten assessment gaps
image.yaml #44 -Commit
b66ce13e4e
pushed by
tegwick
Register the approver client now its callback exists
image.yaml #43 -Commit
c9bb7fac58
pushed by
tegwick
Carry the tenant claim's provenance, and correct a guard the ruling voided
image.yaml #42 -Commit
63d646b594
pushed by
tegwick
Make the static-registration precondition a checked condition
image.yaml #41 -Commit
5f516a0fbb
pushed by
tegwick
Reject service-identity fields a browser client silently ignores
image.yaml #40 -Commit
74b35b6107
pushed by
tegwick
Let a human token carry the zone it is issued into, without relabelling anyone
image.yaml #39 -Commit
329e48f64a
pushed by
tegwick