curo1305
d7831e9382
- test_totp_setup_returns_uri: GET /api/auth/totp/setup returns provisioning_uri + secret - test_totp_setup_already_enabled: returns 400 when totp_enabled=True - test_totp_setup_requires_auth: returns 401/403 without Bearer - test_password_reset_always_202_nonexistent: anti-enumeration for non-existent email - test_password_reset_always_202_existing: anti-enumeration for existing email - test_password_reset_confirm_invalid_token: returns 400 for bad token - test_password_reset_confirm_weak_password: returns 422 for weak password - test_password_reset_confirm_valid_no_autologin: returns 200 with no access_token (AUTH-05) - test_logout_all_revokes_tokens: returns 200 with revoked message - test_logout_all_requires_auth: returns 401/403 without Bearer - test_totp_enable_rate_limit: 11th call returns 429