GitHub
09/06/2026, 8:58 AM400 Bad Request.
• Reject unsupported MFA methods instead of treating them as TOTP.
• Preserve MFA challenges after invalid method requests.
• Add regression tests for query state, audit logging, and MFA validation.
Validation
• go test ./...
jmpsec/osctrlGitHub
09/06/2026, 9:02 AM