Document how to use TFA with REST

Small change, but will at least be helpful for future me and perhaps other devs

phpstan issue unrelated and occurs on 2.x

For the 2.x we are embracing using GitLab Pages for the documentation/manual. This is rendered by mkdocs from the markdown files in the docs folder and published on each 2.x pipeline execution. It is also currently included in each download for offline viewing.

We likely should place this somewhere in the docs (there may be no great location for it at the moment as they are sparsly populated, a new section may be necessary).

I'm going to set back to NW for including in the

For REST logins I would suggest sites I would recommend the site owner consider using an API token auth provider (unless we are talking about the post login to obtain a cookie).

This will impact password access that uses the user.auth service to validate a use. Known scenarios this is relevant for:

• Password confirmation forms that do not check the database directly
• HTTP Post to /user/login (this is always enabled in Drupal Core).
• http_basic authentication

Given the above not sure it if makes sense to limit this to just the rest module enabled.

To me it feels a bit unusual to inline this, though at the moment it is indeed not documented anywhere except in the deep issues logs.

scott_euser → changed the visibility of the branch 3521300-document-tfa-and-rest to hidden.

Makes sense and thank you for the detailed explanation. I added a documentation page nested within configuration with options + tried to capture your recommendation with examples.

Looks good.

I did add the new page to the menu above exempting authentication provides.

Minor suggestion on possible text change to be a bit more agnostic on providers provided in text.

Sorry was slow getting back to you here! Thanks for resolving, after the changes the wording is clear and would help future travellers trying to figure out how it works.

And thanks for the great module overall, much appreciated!

Thanks for the confirmation you find the suggested tweaks acceptable.

Committing MR!129 to Dev (should show up on GitLab pages in a few minutes).

Do you find the documentation pages sufficient that we can also close out MR!126?

scott_euser → closed merge request !126

Yes thank you :) Closed the MR.

Thank you for confirming.

Closing the issue out as fixed.

Thank you again for the primary work on this commit.

This is the rendered page:
https://project.pages.drupalcode.org/tfa/configuration/tfa-with-rest/

Automatically closed - issue fixed for 2 weeks with no activity.