Files
Fadlika Dita Nurjanto 9fee696585 feat(mfa): support multiple users per device for device trust (#2360)
When multiple users trust the same device/browser, the device trust cookie
was being overwritten, causing previous users to lose their trust status.

This change introduces a composite cookie format that stores multiple
user tokens in a single cookie: <user_id>:<token>|<user_id>:<token>

Features:
- New DeviceTrustMaxUsersPerDevice config option (default: 20)
- Backward compatible with legacy single-token format
- Automatic migration from legacy to new format
- Most recent user entry is prioritized (added to front)
2026-01-15 16:56:50 +01:00
..
2025-01-15 21:28:23 +01:00