From c298cd900e968d4ad41d686d29fb4516f98f5c3b Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 13 Sep 2026 21:21:24 +0200 Subject: [PATCH] Refuse multi-owner factors and lock ownership during recovery Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c --- src/user_engine/factor_recovery.py | 1 + 1 file changed, 1 insertion(+) diff --git a/src/user_engine/factor_recovery.py b/src/user_engine/factor_recovery.py index 503c93f..f859da5 100644 --- a/src/user_engine/factor_recovery.py +++ b/src/user_engine/factor_recovery.py @@ -60,6 +60,7 @@ def page(csrf, result=None, submitted=None, management_url=''): 'factor_not_owned_by_target':'That authenticator no longer belongs to this login. Check the target.', 'reference_conflict':'This support reference belongs to another recovery. Check the recorded operation.', 'invalid_request':'Enter a valid login and support reference.', + 'shared_factor_not_supported':'Recovery was refused because an authenticator is shared by multiple identities. Ask the sign-in service owner to resolve its ownership before recovery.', 'account_not_found':'This directory login was not found. Check the exact login name.', } if failure: