Project

General

Profile

Actions

User Story #238

open

Epic #3: Implement a secure user authentication system

Feature #160: User Login

As a user, I want to enable and disable TOTP from my profile, so that I can manage my two-factor authentication settings

User Story #238: As a user, I want to enable and disable TOTP from my profile, so that I can manage my two-factor authentication settings

Added by Bricklou 11 days ago. Updated about 2 hours ago.

Status:
In Progress
Priority:
Normal
Assigned To:
Start date:
08/12/2026
Due date:
% Done:

0%

Estimated time:
(Total: 0:00 h)

Description

This user story covers self-service TOTP setup and management from the user profile UI.

Acceptance requirements:

  • Users can initiate TOTP setup: the app generates a secret and displays a QR code and manual entry code
  • Users must confirm with a valid OTP code before TOTP is activated (prevents locking out on misconfigured authenticator)
  • Users can disable TOTP (requires providing a current OTP code or password as confirmation)
  • The profile UI shows the current MFA status (enabled / disabled)

Subtasks 5 (5 open0 closed)

Sub-Task #244: API endpoint: initiate TOTP setup (generate secret, return base32 + otpauth URL)In ProgressBricklou08/20/2026

Actions
Sub-Task #245: API endpoint: confirm and activate TOTP (verify OTP code before persisting secret)Draft08/12/2026

Actions
Sub-Task #247: API endpoint: disable TOTP (requires current OTP code or password confirmation)In ProgressBricklou08/20/2026

Actions
Sub-Task #248: Frontend: TOTP setup wizard (QR code display, manual entry, confirmation code input)Draft08/12/2026

Actions
Sub-Task #249: Frontend: MFA management section in user profile (enable/disable/status)Draft08/12/2026

Actions
Actions

Also available in: PDF Atom