trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trails/openspec/changes/account-settings/specs/journal-auth/spec.md
Ullrich Schäfer 388a7d4866
Add account-settings OpenSpec change 
Settings page at /settings with profile editing, passkey management
(list, add, delete), email change with verification, and account
deletion. Includes comprehensive E2E test plan using virtual WebAuthn.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 10:00:46 +02:00

1.4 KiB
Raw Blame History

MODIFIED Requirements

Requirement: Add passkey from new device

The Journal SHALL allow logged-in users to register additional passkeys from the account settings page or via the post-login prompt.

Scenario: Add passkey after magic link login

  • WHEN a user logs in via magic link on a device that supports WebAuthn
  • THEN the system prompts them to register a passkey for that device

Scenario: Add passkey from settings

  • WHEN a user clicks "Add passkey" in the security section of account settings
  • THEN the browser passkey creation prompt appears and the new passkey is stored

Scenario: Add passkey prompt on unsupported browser

  • WHEN a user logs in via magic link on a device that does not support WebAuthn
  • THEN the system shows the add-passkey prompt with a message that the browser does not support passkeys

ADDED Requirements

Requirement: Delete passkey

The Journal SHALL allow users to delete individual passkeys from account settings.

Scenario: Delete passkey

  • WHEN a user deletes a passkey from account settings
  • THEN the credential is removed from the database and can no longer be used for authentication

Scenario: Delete last passkey warning

  • WHEN a user attempts to delete their only remaining passkey
  • THEN a warning is shown explaining they will need to use magic links, and deletion proceeds after confirmation