release: WRNexusJS 0.5.0

packages/auth/migrations/002_auth_otp_purpose.sql

@@ -0,0 +1,9 @@
+-- +up
+-- Separate challenge purposes prevent a verification OTP from being replayed
+-- as a passwordless-login or MFA challenge.
+ALTER TABLE wrn_auth_otp_challenges
+  ADD COLUMN purpose VARCHAR(32) NOT NULL DEFAULT 'verification';
+
+-- +down
+ALTER TABLE wrn_auth_otp_challenges
+  DROP COLUMN purpose;