[pbs-devel] [PATCH proxmox-backup 1/1] ui: login: opt the tfa challenge handling into the new HttpOnly flow

[Thomas Lamprecht]

On Wed, 06 Aug 2025 11:57:02 +0200, Shannon Sterz wrote:
> this was missed previously leading to the tfa part of the auth flow
> not opting into the new auth flow. this meant the server did not add a
> Set-Cookie header. after that whether or not a login worked fine
> became a race between the refresh logic (which was opted into the new
> flow and, thus, would yield a proper HttpOnly cookie) and other
> requests.
> 
> [...]

Applied, thanks!

tiny nit: we would prefer camelCase in JS, but that's just internal so we can
change it at any time with a fallback to the previous property.

[1/1] ui: login: opt the tfa challenge handling into the new HttpOnly flow
      commit: 4e7c0d6a264557e4e9eea3b0cae2a97260848469