Fix 2FA

backend/src/middleware/auth.js

@@ -18,6 +18,13 @@ export function requireAuth(req, res, next) {
   try {
     const decoded = jwt.verify(token, JWT_SECRET);
     req.user = { id: decoded.sub, email: decoded.email };
+    // Mettre à jour last_seen_at si un device token valide est présent
+    const deviceToken = req.headers['x-device-token'];
+    if (deviceToken) {
+      db.prepare(
+        "UPDATE two_fa_trusted_devices SET last_seen_at = datetime('now') WHERE token = ? AND user_id = ? AND expires_at > datetime('now')"
+      ).run(deviceToken, decoded.sub);
+    }
     next();
   } catch {
     return res.status(401).json({ error: 'Invalid or expired token' });