From 6eb28d6ec4022a3b8625c75edc30113a41453b86 Mon Sep 17 00:00:00 2001 From: master3395 Date: Sat, 7 Mar 2026 02:47:55 +0100 Subject: [PATCH] docs: remove hardcoded IP from 2FA guide (use your-server placeholder) --- docs/2FA_AUTHENTICATION_GUIDE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/2FA_AUTHENTICATION_GUIDE.md b/docs/2FA_AUTHENTICATION_GUIDE.md index cdf71aaac..ded35f069 100644 --- a/docs/2FA_AUTHENTICATION_GUIDE.md +++ b/docs/2FA_AUTHENTICATION_GUIDE.md @@ -97,7 +97,7 @@ TOTP generates time-based codes that change every 30 seconds. Users scan a QR co ### What is WebAuthn? WebAuthn is a web standard that enables secure, passwordless authentication using public-key cryptography. It supports biometric authentication, security keys, and device passkeys. -**Login behaviour**: The login page supports **passkey-first** sign-in: users can click "Login with Passkey" without entering a username. Passkeys are managed under **User Management → Modify User**. The relying party ID (`rp_id`) and origin are derived from the current request host only (never hardcoded), so WebAuthn works on any domain or IP (e.g. `https://207.180.193.210:2087`). +**Login behaviour**: The login page supports **passkey-first** sign-in: users can click "Login with Passkey" without entering a username. Passkeys are managed under **User Management → Modify User**. The relying party ID (`rp_id`) and origin are derived from the current request host only (never hardcoded), so WebAuthn works on any domain or IP (e.g. `https://your-server:2087`). ### Setting Up WebAuthn