mirror of
https://github.com/n8n-io/n8n.git
synced 2026-10-17 21:49:36 +02:00
db983f0e53
- `verifyAuthenticationResponse` already loads the credential row to derive UV requirements; pass it through to `verifyAssertion` instead of repeating the lookup. - `getAvailableMfaMethods` ran two independent reads sequentially — fan them out with `Promise.all`. Hit on every MFA-required login. - `deleteWebAuthnCredential` only needed to know whether TOTP is set, but called `getSecretAndRecoveryCodes` which AES-decrypts the secret plus every recovery code. Add a lightweight `hasTotpSecret(userId)` and use that instead. - Replace bare `throw new Error` with `OperationalError`, drop the WebAuthn section banner and a couple of comments that just paraphrased the surrounding code. |
||
|---|---|---|
| .. | ||
| bin | ||
| scripts | ||
| src | ||
| templates | ||
| test | ||
| BREAKING-CHANGES.md | ||
| eslint.config.mjs | ||
| jest.config.integration.js | ||
| jest.config.integration.testcontainers.js | ||
| jest.config.js | ||
| jest.config.migration.js | ||
| jest.config.migration.testcontainers.js | ||
| jest.config.unit.js | ||
| nodemon.json | ||
| package.json | ||
| tsconfig.build.json | ||
| tsconfig.json | ||