- Added a new API keys service with endpoints for creating, listing, revoking, and deleting API keys.
- Integrated API key validation and caching for performance.
- Updated backend configuration to include API key secret and throttling settings.
- Created frontend components for managing API keys, including a user interface for creating and displaying keys.
- Introduced a new database migration for the API keys table with necessary constraints and security policies.
- Enhanced authentication methods to support API key usage alongside JWT.
- Updated phone verification API to support SMS-based 2FA, allowing users to enroll and verify their phone numbers.
- Introduced new components for background AAL checking and status display, improving user experience during authentication.
- Removed the deprecated PhoneVerificationGuard component and integrated its functionality into the new AALChecker and BackgroundAALChecker components.
- Updated React Query hooks for managing phone verification and AAL states, ensuring efficient data handling and cache management.
- Enhanced frontend layout to accommodate new verification flows and improve overall responsiveness.
This update strengthens account security by enforcing phone verification for new users and streamlining the MFA process.
- Added phone verification endpoints for TOTP-based multi-factor authentication in the backend.
- Created frontend components for phone input and OTP verification.
- Integrated phone verification guard to ensure users complete verification before accessing the app.
- Updated API routes and React Query hooks for managing phone verification status and actions.
This feature enhances account security by requiring users to verify their phone numbers.