Johanna LarssonandTangled 09ba5e4521 Allow disabling TOTP even if last session was legacy ...

This removes the `require_legacy_session_mfa` call on the TOTP disable path. It looks at the last session, which isn't really relevant, and we're getting a fresh TOTP from the form anyway, which should be enough proof to allow disabling TOTP.

The way I bumped into this was having a "bot account" log in with app password on some app on a schdule, triggering lots of warning emails. So I tried to disable TOTP to stop the flood and wasn't allowed.

2026-09-05 18:16:56 +00:00

..

src

Allow disabling TOTP even if last session was legacy

2026-09-05 18:16:56 +00:00

Cargo.toml

feat: add bsky and bsky-support cargo features to manage bsky specific code

2026-07-25 18:31:06 +03:00