From 7860fca45f12e82b43f492330a965d5a458c8c2a Mon Sep 17 00:00:00 2001
From: Daniel Ehrhardt <daniel.ehrhardt@codext.de>
Date: Sun, 25 Oct 2026 09:12:29 +0100
Subject: [PATCH] Cloud scope: classify the 2FA auto-link routes

---
 packages/core/src/cloud/scope.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/packages/core/src/cloud/scope.ts b/packages/core/src/cloud/scope.ts
index 0170bbef..6469b9ed 100644
--- a/packages/core/src/cloud/scope.ts
+++ b/packages/core/src/cloud/scope.ts
@@ -107,6 +107,8 @@ const RULES: [methods: string, path: string, rule: Rule][] = [
   ["POST", "/api/totp", S],
   ["GET", "/api/totp/codes", S],
   ["POST", "/api/totp/import", S],
+  ["GET", "/api/totp/autolink", A],
+  ["POST", "/api/totp/autolink", S],
   ["PATCH", "/api/totp/:id", S],
   ["DELETE", "/api/totp/:id", A],
   ["GET", "/api/passkeys", A],