- Introduced a new function to determine if phone verification is mandatory based on an environment variable.
- Updated the logic in the authentication assurance level check to reflect the new phone verification requirement for new users.
- Enhanced logging to provide clearer insights into phone verification status during authentication checks.
This update improves the flexibility of phone verification requirements based on deployment configurations.
- Updated phone verification API to support SMS-based 2FA, allowing users to enroll and verify their phone numbers.
- Introduced new components for background AAL checking and status display, improving user experience during authentication.
- Removed the deprecated PhoneVerificationGuard component and integrated its functionality into the new AALChecker and BackgroundAALChecker components.
- Updated React Query hooks for managing phone verification and AAL states, ensuring efficient data handling and cache management.
- Enhanced frontend layout to accommodate new verification flows and improve overall responsiveness.
This update strengthens account security by enforcing phone verification for new users and streamlining the MFA process.
- Added phone verification endpoints for TOTP-based multi-factor authentication in the backend.
- Created frontend components for phone input and OTP verification.
- Integrated phone verification guard to ensure users complete verification before accessing the app.
- Updated API routes and React Query hooks for managing phone verification status and actions.
This feature enhances account security by requiring users to verify their phone numbers.
sharath