====== pears.IQXNetWebSettings ======
<WRAP center round info>
Generated schema reference. Regenerate this page from the SQL unload; keep hand-maintained business notes in the narrative namespace.
</WRAP>

===== Description =====
Stores per-user web preferences and security settings. One row per user, created on first use. Controls whether MFA is active for the user, whether it must be re-challenged on token refresh, and whether to use Gravatar for their avatar. The "MFASecret" is a TOTP base32 seed set during MFA enrolment and must be kept confidential.

===== Columns =====
^ Column ^ Type ^ Null ^ Default ^ Comment ^
| **IQXNetWebSettingsID** | char(20) | NOT NULL |  | PK |
| IQXNetUserID | char(20) | NULL |  | FK → IQXNetUser |
| BiometricLock | smallint | NULL |  | Flag indicating if biometric lock is enabled (1 = yes, 0 = no) |
| GravatarEnabled | smallint | NULL |  | 1 = use Gravatar for the user's avatar |
| MFAEnabled | smallint | NULL |  | 1 = user has MFA turned on |
| MFAOnRefresh | smallint | NULL |  | 1 = MFA challenge required when session token is refreshed |
| MFASecret | char(100) | NULL |  | TOTP secret key (base32) used to verify MFA codes |

===== Primary Key =====
  * IQXNetWebSettingsID

===== Foreign Keys =====
  * No outgoing foreign keys found.

===== Referenced By =====
  * No incoming foreign keys found.

===== Indexes =====
  * No indexes found.

===== Triggers =====
  * No triggers found.

===== Original SQL =====
<code sql>
-- IQX database structure split by table
-- Source: IQXDatabaseStructure - with comments.sql
-- Table: "pears"."IQXNetWebSettings"
-- Table comment: Stores per-user web preferences and security settings. One row per user, created on first use. Controls whether MFA is active for the user, whether it must be re-challenged on token refresh, and whether to use Gravatar for their avatar. The "MFASecret" is a TOTP base32 seed set during MFA enrolment and must be kept confidential.
-- Statement count: 9

CREATE TABLE "pears"."IQXNetWebSettings" (
    "IQXNetWebSettingsID"            char(20) NOT NULL
   ,"IQXNetUserID"                   char(20) NULL
   ,"BiometricLock"                  smallint NULL
   ,"GravatarEnabled"                smallint NULL
   ,"MFAEnabled"                     smallint NULL
   ,"MFAOnRefresh"                   smallint NULL
   ,"MFASecret"                      char(100) NULL
   ,PRIMARY KEY ("IQXNetWebSettingsID" ASC) 
)
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."IQXNetWebSettingsID" IS 
	'PK'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."IQXNetUserID" IS 
	'FK → IQXNetUser'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."BiometricLock" IS 
	'Flag indicating if biometric lock is enabled (1 = yes, 0 = no)'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."GravatarEnabled" IS 
	'1 = use Gravatar for the user''s avatar'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."MFAEnabled" IS 
	'1 = user has MFA turned on'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."MFAOnRefresh" IS 
	'1 = MFA challenge required when session token is refreshed'
go


COMMENT ON COLUMN "pears"."IQXNetWebSettings"."MFASecret" IS 
	'TOTP secret key (base32) used to verify MFA codes'
go


COMMENT ON TABLE "pears"."IQXNetWebSettings" IS 
	'Stores per-user web preferences and security settings. One row per user, created on first use. Controls whether MFA is active for the user, whether it must be re-challenged on token refresh, and whether to use Gravatar for their avatar. The "MFASecret" is a TOTP base32 seed set during MFA enrolment and must be kept confidential.'
go
</code>