I'm developing a transactional web application where I would like to confirm certain actions by asking users to use a TFA method, such as a one-time pin (SMS) or google authenticator code to confirm certain critical actions and I'd like some advice about the best way to achieve this.
I'd like to leverage the work done in this module, so that the same methods used by a user when they login can be used to confirm an action. For example, if I am submitting a form, I assume I can implement hook_form_alter to call a TFA function. Then what?
Any broad guidance so that I can get some idea how to achieve this would be appreciated. I've read the readme and it is not obvious to me how best to do this. I probably wont be able to code the module myself, but have a few developers that can assist and would look to contribute the resultant module.
Any suggestions would be much appreciated.
John
Closed: outdated
2.0
Documentation
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Drupal 7 end-of-life triage:
Drupal 7 reached end of life on January 5th.
The 7.x branches of TFA do not have any additional planned releases.
There is already an open issue for the D8+ branches at #3323866: Offer TFA flow for other use cases than login → that can be used for further consideration of this issue for supported releases..