Voice Dictation for ClickUp: Tasks, Comments & Project Documentation

Contextli outputs:

**Implement Two-Factor Authentication**

**Priority:** High (Security audit requirement)

**Scope:**
• Primary: Authenticator app support (TOTP)
• Backup: SMS verification
• Recovery: Backup codes for lost devices

**User Flows:**
1. New user 2FA setup during onboarding
2. Existing user 2FA enrollment
3. Recovery code generation and usage

**Acceptance Criteria:**
- [ ] TOTP authenticator works with major apps
- [ ] SMS fallback functional
- [ ] Recovery codes generate and validate
- [ ] Clear setup instructions for users

Contextli outputs:

# API Authentication

## Overview
Our API uses JWT (JSON Web Tokens) for authentication.

## Token Specifications
| Token Type | Expiry |
|------------|--------|
| Access Token | 1 hour |
| Refresh Token | 30 days |

## Usage
Include the access token in the Authorization header:
```
Authorization: Bearer <your_token>
```

## Endpoints

### Login
```
POST /api/auth/login
```

### Refresh Token
```
POST /api/auth/refresh
```

Contextli outputs:

Ready for review! ✅

**Tested:** All discussed edge cases

**Remaining:** Error messages for validation failures (can add post-review if approach is approved)

Let me know your thoughts!