feat: admin controls

app/components/Dialog/TwoFactor.vue

@@ -88,7 +88,7 @@ const submitPassword = async () => {
     if (action.value === 'enable') {
         const { data, error: err } = await authClient.twoFactor.enable(body);
 
-        if (err || !data) {
+        if (err || !data || data.method !== 'totp') {
             error.value = describeError(err, 'Two-factor could not be set up. Try again.');
         } else {
             // nothing is turned on until a code from the app is verified
@@ -136,12 +136,9 @@ const verifyCode = async () => {
         code.value = '';
         busy.value = false;
 
-        // the boxes are disabled while busy and can't take focus until now
         await nextTick();
         codeInputEl.value?.focus();
     } else {
-        // set here rather than by whoever opened the dialog, so it is right
-        // even if the dialog gets dismissed on the last step
         if (user.value) user.value = { ...user.value, twoFactorEnabled: true };
         step.value = 'codes';
     }
@@ -155,7 +152,7 @@ const numberedBackupCodes = computed(() =>
 );
 
 const startCheck = async () => {
-    // a different code every time, so going back to peek at one is not enough
+    // a different code every time
     checkIndex.value = Math.floor(Math.random() * backupCodes.value.length);
     checkInput.value = '';
     error.value = '';