- Shipped
- April 23, 2026 at 8:47 PM UTC
- Author
- Kamo
- Commit
- 43a78dd
Insert two new steps between Password and Account Recovery for 13+ registrants: a phone-number step (optional, skippable, with SMS code verification) and a security-questions step (required, 3 distinct questions with answers). Under-13 registrants continue to skip both and rely on their seed phrase for recovery. - FormPhoneNumber: idle -> entering-code -> verified state machine, per-step Capcha widget gating SMS send, change-number and skip paths. - FormSecurityQuestions: 3 dropdowns + answers, uniqueness enforced, catalog fetched from the new public backend endpoint. - RegisterFlow: new formData fields, conditional steps, handleNext validation, phone + securityQuestions wired into the submit body. - /api/security proxy now forwards X-Forwarded-Host so the backend can resolve the org for SMS provider selection.