Fixed
- TOTP Key Material:
UpdatedTotpKeyMaterialProviderto derive key material from the stored app authentication secret concatenated with
the user ID, instead of using the raw TOTP code.
This ensures stronger and stable key material while still verifying the user’s TOTP input.
Added
- Unit & Integration Tests:
- Added unit tests for
TotpKeyMaterialProviderto verify support detection and correct key derivation. - Added integration tests for
UserKeyMaterialResolverwith TOTP verification. - Added unit tests for
PasskeyKeyMaterialProviderwith session-based passkey resolution.
- Added unit tests for