# Web UI Progress Tracker

This document tracks the ongoing frontend implementation tasks required to
complete the Identity Provider Web Application as identified in `WEB_AUDIT.md`.

## Prioritized UI Task Checklist

### Phase 1: UX Polish & Session Insights

- [x] **WebAuthn UX Improvements:** Refine cross-device registration and login
      flows in `LoginPage.tsx` and `RegisterPage.tsx` to better guide users
      (e.g., prompt for hardware token insertion or QR code scanning).
- [x] **Session Review Interface:** Implement a dashboard view where
      authenticated users can view active session tokens and historical
      connection logs (timestamps, IP addresses).
- [x] **Layout System:** Create standard layout wrapper components (`Layout.tsx`
      enhancements) to handle global navigation for authenticated states.

### Phase 2: Credential Redundancy (User Settings)

- [x] **Passkey Management Panel:** Develop a user settings UI to list
      registered authenticators.
- [x] **Register Additional Passkeys:** Implement the flow for authenticated
      users to register secondary/backup hardware tokens.
- [x] **Revoke Passkey UI:** Add functionality for users to permanently delete a
      specific compromised credential.

### Phase 3: Administrative Workflows

- [x] **Admin Dashboard Layout:** Create a protected route/layout strictly for
      users with administrative roles.
- [x] **Manual State Machine Activation:** The UI to review and toggle users
      from a default 'pending' state to 'active' before sessions can be issued
      (Use Case 3).
- [x] **Out-of-Band Account Recovery:** A specific UI for administrators to
      execute a database override, generating and binding a new WebAuthn
      challenge to an existing user's UUID when all previous authenticators are
      lost (Use Case 12).
- [x] **Global Session & Device Revocation:** The interface for administrators
      to instantly revoke active Valkey sessions or delete specific device
      nicknames from PostgreSQL (Use Cases 6 & 7.1).
- [x] **AAGUID Allow-List Management:** An interface to manage the enterprise
      allow-list of approved hardware Authenticator Attestation GUIDs, ensuring
      software passkeys are rejected (Section 5.3).
- [x] **System Audit Log Viewer:** Develop a UI for admins to review system-wide
      audit records directly from the database.