r-zakarya d101192e22 fix(recovery): don't commit the code until the user saves it ...

Generating a recovery code POSTed /recovery-key/setup — which deletes any
existing recovery row and inserts the new one — BEFORE showing the code. So
cancelling the "save this code" modal still erased the old code and activated
a new one the user never saw: a silent path to lockout.

Generate + wrap locally, show the code, and only POST setup after "I saved
it". Cancel now writes nothing — the account is left exactly as it was, old
code still valid.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-25 00:26:32 +01:00

css

fix(batch): move the selection bar into the title row

2026-07-23 15:59:53 +01:00

delphi-backend

fix(recovery): echo Argon2 params in the redeem response

2026-07-25 00:19:16 +01:00

js

fix(recovery): don't commit the code until the user saves it

2026-07-25 00:26:32 +01:00

.gitattributes

feat: secure notes + password history + custom fields + quick-win bundle

2026-06-14 20:17:19 +01:00

.gitignore

chore: stop tracking generated embedded-asset artifacts

2026-07-11 18:35:28 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

refactor(db): drop cleartext template refs, fix ghost columns + fresh-DB schema

2026-07-11 19:52:26 +01:00

CODE_AUDIT.md

fix(kdf): neutralize the /migrate-kdf endpoint server-side (6c-1 / 6c-4)

2026-07-20 05:43:39 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

style(table): move the column picker into the table header corner

2026-07-21 20:00:56 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SCENARIOS.md

docs: A11 fixed, plus its false-positive and deleted-entry scenarios

2026-07-23 22:45:10 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%