Skip to content

feat: read enrolled recovery identifiers and bind escrow challenges to the profile - #11149

Open
huggingbot wants to merge 3 commits into
feat/mfa-recovery-auth-approvalsfrom
feat/mfa-recovery-get-identifiers
Open

huggingbot wants to merge 3 commits into
feat/mfa-recovery-auth-approvalsfrom
feat/mfa-recovery-get-identifiers

Conversation

@huggingbot

@huggingbot huggingbot commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Explanation

Stacked on #10883. Adds getIdentifiers() and profile-bound challenges.

  • getIdentifiers(): AAL1 read returning enrolled identifiers at the highest escrow version (epoch) plus Auth's identifiers. Use it to build updateIdentifiers.
  • generateChallenge takes the operation's approval.

References

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed
  • I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

huggingbot and others added 2 commits October 28, 2026 17:40
Add getIdentifiers to the controller and CubistEscrowProvider (escrow #8),
and pass the operation's AuthController token to generateChallenge (escrow #10).

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@huggingbot
huggingbot force-pushed the feat/mfa-recovery-get-identifiers branch from 325168d to 8e5ddad Compare October 28, 2026 09:46
Co-authored-by: Cursor <cursoragent@cursor.com>
@huggingbot
huggingbot marked this pull request as ready for review October 28, 2026 14:49
@huggingbot
huggingbot requested review from a team as code owners October 28, 2026 14:49

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant