Your Name 878ca731f4 fix: atomic TOTP recovery code consumption with repository-level transaction ...

- Add ConsumeTOTPRecoveryCode to UserRepository for atomic read-verify-update
- Update TOTPService.VerifyTOTP to prefer atomic consumption when available
- Update AuthService.verifyTOTPCodeOrRecoveryCode with same pattern
- Fix critical bug: ConsumeTOTPRecoveryCode now correctly returns consumed=false on mismatch
- Maintain backward compatibility: falls back to non-atomic path if repo doesn't implement interface
- Add comprehensive unit tests for atomic consumption path

Refs: review-fix-closure-2026-05-28 TOTP recovery code atomicity

2026-05-29 12:31:36 +08:00

..

api

fix: harden avatar upload path and sync review truth

2026-05-29 07:33:19 +08:00

auth

fix: close auth, permission, contract and e2e review blockers

2026-05-28 15:19:13 +08:00

cache

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

concurrent

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

config

test: realign verification baseline and supporting tests

2026-05-28 15:19:34 +08:00

database

perf: Sprint 19 P0/P1 性能优化落地

2026-04-18 22:57:44 +08:00

domain

fix: P0/P1 security and quality fixes

2026-04-18 15:33:12 +08:00

e2e

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

integration

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

middleware

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00

monitoring

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

pagination

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

performance

fix: P2 security and correctness issues

2026-04-18 20:48:11 +08:00

pkg

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

repository

fix: atomic TOTP recovery code consumption with repository-level transaction

2026-05-29 12:31:36 +08:00

robustness

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

security

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

server

fix: fail closed on invalid cors config

2026-05-28 16:53:33 +08:00

service

fix: atomic TOTP recovery code consumption with repository-level transaction

2026-05-29 12:31:36 +08:00

testdb

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

testutil

test: add comprehensive test coverage and improve code quality

2026-04-17 20:43:50 +08:00

util

feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers

2026-04-02 11:19:50 +08:00