bastodon/app/controllers/settings/two_factor_authentication
..
confirmations_controller.rb
otp_authentication_controller.rb
recovery_codes_controller.rb
webauthn_credentials_controller.rb