Refactor MultifactorAuthenticationContextProvider to XState state machine - #98137

Draft

jakubstec wants to merge 249 commits into

Expensify:mainfrom

software-mansion-labs:dariusz-81197-mfa-state-machine

Commits on Jun 9, 2026

Commits on Jun 10, 2026

refactor(mfa): drive the flow with an XState machine skeleton
dariusz-biela
committed
e759df0
refactor(mfa): model the modal lifecycle as a parent open state
dariusz-biela
committed
17723b5
refactor(mfa): replace the navigator Phase state with machine modalPhase
dariusz-biela
committed
6eb224f
fix(mfa): stop cutting the backdrop fade mid-close
dariusz-biela
committed
00a55dc
docs(mfa): fix stale claims and trim duplicated comments
dariusz-biela
committed
807b3b4
docs(mfa): move machine comments next to the code they explain
dariusz-biela
committed
f71935c

Commits on Jun 11, 2026

Commits on Jun 12, 2026

Commits on Jun 15, 2026

Commits on Jun 16, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Merge remote-tracking branch 'origin/main' into dariusz-81197-mfa-state-machine
rafecolton
committed
707be04

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jul 8, 2026

Commits on Jul 14, 2026

Commits on Jul 16, 2026

Merge pull request #346 from software-mansion-labs/dariusz-biela/feat/3ds/mfa-device-check-and-failure-screen
dariusz-biela
authored
9cef76f

Commits on Jul 17, 2026

Commits on Jul 20, 2026

Commits on Jul 21, 2026

test(mfa): hydrate the session account in the ui walk harness
dariusz-biela
committed
1a4f560

Commits on Jul 23, 2026

Merge pull request #352 from software-mansion-labs/dariusz-biela/feat/3ds/mfa-soft-prompt
dariusz-biela
authored
9646ec7

Commits on Jul 27, 2026

Merge remote-tracking branch 'origin/main' into dariusz-81197-mfa-state-machine
dariusz-biela
committed
da67767

Commits on Aug 5, 2026

Commits on Aug 6, 2026

Merge pull request #355 from software-mansion-labs/dariusz-biela/feat/3ds/mfa-magic-code-and-registration-decision
dariusz-biela
authored
50b8e1e
feat: prepare credential creation skeleton and its tests

jakubstec
authored and
dariusz-biela
committed
b5837a3
feat(mfa): add credential creation to the state machine

jakubstec
authored and
dariusz-biela
committed
047e841
refactor: hydrate hasAcceptedSoftPrompt before starting the flow, match production parity: new user or re-registration always requires soft-prompt approval

jakubstec
authored and
dariusz-biela
committed
dc5151f
fix: handle session switching during flow so no stale account data exists in a new one

jakubstec
authored and
dariusz-biela
committed
ae19fff
refactor: clarify registration state snapshot naming

jakubstec
authored and
dariusz-biela
committed
2d913e4

Commits on Aug 7, 2026

Commits on Aug 10, 2026

fix: add useEffect to guard account change, so we end current flow to clear the machine state
jakubstec
committed
5ffa82b

Commits on Aug 11, 2026

Commits on Aug 12, 2026

refactor: authorization and tests
jakubstec
committed
a5542ec
refactor: legacy code clean-up
jakubstec
committed
f392fcb
test: cover scenario payload forwarding during authorization
jakubstec
committed
49eedd8

Commits on Aug 17, 2026

fix: split credential failures for recovery routing
jakubstec
committed
bc1199e

Commits on Aug 19, 2026

Commits on Aug 21, 2026

fix: address the comments
jakubstec
committed
7184493
fix: assert the authorize ceremony gets the flow-scoped signal that aborts on actor stop
jakubstec
committed
2c5bbbf
fix: harden inspector masking and passkey handling
jakubstec
committed
62a423d

Commits on Aug 31, 2026

fix: change validateCode state name to fix crashing inspector
jakubstec
committed
4b61cf5
fix: clarify comment about prompt page titles
jakubstec
committed
82a763a

Commits on Sep 8, 2026

Merge pull request #360 from software-mansion-labs/jakubstec/3ds/mfa-auth
jakubstec
authored
2133fff