From 3e1da9c33522292d85a3104aa3ee7230ca060131 Mon Sep 17 00:00:00 2001
From: Ryan <ryantl66@gmail.com>
Date: Wed, 23 Apr 2025 21:15:55 -0400
Subject: [PATCH] Add missing permissions in UserModel.php for TOTP login.

---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 42c3bab..2e68844 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,7 @@
 - Updates both `window.csrfToken` and the `<meta name="csrf-token">` & `<meta name="share-url">` tags  
 - Removed Old CSRF logic that cloned every successful response and parsed its JSON body  
 - Removed Any “soft-failure” JSON peek on non-403 responses
+- Add missing permissions in `UserModel.php` for TOTP login.
 
 ## Changes 4/22/2025 v1.2.3