Skip to content

docs(design): two-factor authentication screen lab and picks - #1339

Merged
mforce merged 13 commits into
mainfrom
docs/1275-two-factor-mockups
Oct 21, 2026
Merged

mforce merged 13 commits into
mainfrom
docs/1275-two-factor-mockups

Conversation

@mforce

@mforce mforce commented Oct 21, 2026 •

Copy link
Copy Markdown
Owner

I added a standalone HTML lab for six two-factor authentication screens, with simulated flows and renders at 1280 and 390 pixels. SELECTION.md records the layouts and representative frame names.

I picked Enrolment A and Step-up A: "ok A both then". The other four screens had one design each. I approved them as drawn on 2026-10-21: "Approve as drawn".

  • Account: the Security accordion.
  • Enrolment A: scan and confirm together.
  • Recovery codes: save the codes before leaving.
  • Login code: the existing Login B card.
  • Step-up A: inline password plus code, labelled A2 in the lab.
  • Users reset: the selected-user inspector and password-plus-code confirmation.

Step-up takes the password and a code, as I decided on 2026-10-20 in #1274, recorded in PR #1334. A1 code alone is not used. Recovery-code entry retains the password field.

The picks comment records the selections. The earlier renders comment shows the lab before review and is superseded by the current frames after review.

No images are committed. node docs/designs/1275-two-factor/shoot.mjs renders the full set at 1:1, including night mode for the selected directions. At a7c636f4bc6130b5ce4ce2069b0a168dd571a91a, all 416 frame checks and interaction assertions passed, including 76 phone throttle frames. The image-pin guard passed both tests.

Local review included one full review, then five delta checks at fbf8f6d4, ef02ab51, 794df6e0, 956231c6 and a7c636f4. The sequence ended clean, with all findings resolved, and covers every commit through the pushed head, a7c636f4bc6130b5ce4ce2069b0a168dd571a91a. Every commit after a7c636f4 only merges main. A narrow review confirmed each merge leaves the branch's own diff byte-identical, and the image-pin tests pass at each one.

Docs-impact: none — this lab documents future screens and changes no application text or behaviour.

Closes #1275

Comment thread docs/designs/1275-two-factor/two-factor-lab.html Fixed
Comment thread docs/designs/1275-two-factor/two-factor-lab.html Fixed
@mforce
mforce merged commit f15f728 into main Oct 21, 2026
17 of 18 checks passed
@mforce
mforce deleted the docs/1275-two-factor-mockups branch October 21, 2026 22:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2FA slice 2: mockups for enrolment, the login code step and step-up

2 participants