Your Name 878ca731f4 fix: atomic TOTP recovery code consumption with repository-level transaction ...

- Add ConsumeTOTPRecoveryCode to UserRepository for atomic read-verify-update
- Update TOTPService.VerifyTOTP to prefer atomic consumption when available
- Update AuthService.verifyTOTPCodeOrRecoveryCode with same pattern
- Fix critical bug: ConsumeTOTPRecoveryCode now correctly returns consumed=false on mismatch
- Maintain backward compatibility: falls back to non-atomic path if repo doesn't implement interface
- Add comprehensive unit tests for atomic consumption path

Refs: review-fix-closure-2026-05-28 TOTP recovery code atomicity

2026-05-29 12:31:36 +08:00

..

prompts

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

auth_admin_bootstrap_internal_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_admin_bootstrap.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

auth_bootstrap_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_capabilities_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_capabilities.go

feat: complete production readiness improvements

2026-04-12 16:15:32 +08:00

auth_contact_binding_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_contact_binding.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

auth_core_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_email_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_email.go

fix: suppress gosec G115/G118 false positive warnings

2026-04-08 22:50:42 +08:00

auth_login_test.go

fix: close auth, permission, contract and e2e review blockers

2026-05-28 15:19:13 +08:00

auth_logout_failclosed_test.go

fix: close auth, permission, contract and e2e review blockers

2026-05-28 15:19:13 +08:00

auth_oauth_internal_test.go

fix: P1-02 OAuth context propagation and P1-16 AuthProvider double-check

2026-04-18 19:40:54 +08:00

auth_password_internal_test.go

fix: tighten password and surface persistence errors

2026-05-28 20:38:34 +08:00

auth_password_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_runtime_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_runtime.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

auth_service_test.go

fix: tighten password and surface persistence errors

2026-05-28 20:38:34 +08:00

auth_setters_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth_social_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

auth.go

fix: atomic TOTP recovery code consumption with repository-level transaction

2026-05-29 12:31:36 +08:00

boundary_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

business_logic_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

captcha.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

classified_error_test.go

test: add service layer unit tests for webhook/metadata/error/config

2026-04-09 15:30:26 +08:00

classified_error.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

config_defaults_test.go

test: add service layer unit tests for webhook/metadata/error/config

2026-04-09 15:30:26 +08:00

custom_field_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

custom_field.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

device_service_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

device.go

feat: complete production readiness improvements

2026-04-12 16:15:32 +08:00

email_config_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

email_provider_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

email.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

export_helper_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

export_internal_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

export_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

export.go

feat: complete production readiness improvements

2026-04-12 16:15:32 +08:00

header_util_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

header_util.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

login_log_service_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

login_log_util_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

login_log.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

operation_log.go

feat: 系统全面优化 - 设备管理/登录日志导出/性能监控/设置页面

2026-04-07 12:08:16 +08:00

password_reset_internal_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

password_reset_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

password_reset.go

fix: P0-04 prevent password reset code replay attack

2026-04-18 10:26:36 +08:00

permission_service_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

permission.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

request_metadata_test.go

test: add service layer unit tests for webhook/metadata/error/config

2026-04-09 15:30:26 +08:00

request_metadata.go

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

role_service_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

role.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

scale_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

service_simple_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

settings_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

settings.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

sms_provider_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

sms_util_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

sms.go

feat: 系统全面优化 - 设备管理/登录日志导出/性能监控/设置页面

2026-04-07 12:08:16 +08:00

stats_internal_test.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

stats_operation_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

stats_test.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

stats.go

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

theme_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

theme.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

totp_internal_test.go

fix: atomic TOTP recovery code consumption with repository-level transaction

2026-05-29 12:31:36 +08:00

totp_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

totp.go

fix: atomic TOTP recovery code consumption with repository-level transaction

2026-05-29 12:31:36 +08:00

user_roles_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

user_service_test.go

fix: close auth, permission, contract and e2e review blockers

2026-05-28 15:19:13 +08:00

user_service.go

fix: close auth, permission, contract and e2e review blockers

2026-05-28 15:19:13 +08:00

warmup_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

webhook_service_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

webhook_util_test.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

webhook.go

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00