Two-factor Authentication (TFA)

Issues

• 💬

  Do you plan to support SMS based TFA validation?

  Closed: works as designed

  Documentation

  Created over 2 years ago

  v1.0
  🇬🇧United Kingdom Syntapse

  4 days ago
• 📌

  Drupal Core Tests now use one time login links instead of user form

  Active

  Code

  Created 3 months ago

  v2.0
  🇺🇸United States cmlara

  4 days ago
• 📌

  Cleanup TfaUserDataTrait phpstan warnings

  Active

  Code

  Created 18 days ago

  v2.0
  🇺🇸United States cmlara

  4 days ago
• ✨

  Add D11 Support

  Active

  Code

  Created 7 months ago

  v1.0
  🇺🇸United States cmlara

  4 days ago
• 📌

  Use #config_target for the settings form

  Active

  Code

  Created 19 days ago

  v2.0
  🇳🇱Netherlands idebr

  6 days ago
• 🐛

  One setup step remaining, two QR Code Scans required

  Active

  User interface

  Created 3 months ago

  v1.8
  🇺🇸United States cmarcera

  16 days ago
• 📌

  Cleanup cSpell GitLab Warnings

  Active

  Miscellaneous

  Created 17 days ago

  v2.0
  🇺🇸United States cmlara

  16 days ago
• 🐛

  TFA gets automatically disabled for all users.

  Active

  Code

  Created 19 days ago

  v1.8
  🇮🇳India lomasr

  18 days ago
• 🐛

  Redirect correctly after first time plugin setup

  Needs review

  Code

  Created about 1 month ago

  v2.0
  🇬🇧United Kingdom Dubs

  19 days ago
• 🐛

  Admin cannot disable TFA for a user

  Active

  Code

  Created about 1 month ago

  v1.0
  🇳🇿New Zealand RoSk0

  19 days ago
• 🐛

  Password reset not working

  Active

  Code

  Created 8 months ago

  v1.7
  🇳🇱Netherlands zebda

  about 1 month ago
• 🐛

  Full Setup not working on 8.x-1.7

  Active

  Code

  Created 7 months ago

  v1.7
  MarcellinoStroosnijder

  about 1 month ago
• 📌

  Public followup for SA-CONTRIB-2024-043

  Postponed

  Code

  Created 3 months ago

  v2.0
  🇺🇸United States cmlara

  about 1 month ago
• ✨

  Allow modules to skip TFA through a hook

  Active

  Code

  Created 8 months ago

  v1.0
  🇦🇹Austria jordik

  about 1 month ago
• 🐛

  You are not authorized to access this page on remote only

  Active

  User interface

  Created 8 months ago

  v1.7
  🇳🇱Netherlands zebda

  about 2 months ago
• 🐛

  Redirect to TFA doesn't work with login destination modules

  Active

  Code

  Created about 2 months ago

  v1.9
  🇧🇾Belarus gun_dose

  about 2 months ago
• 📌

  Add a Views filter for the 'TFA enabled' field

  Active

  Code

  Created about 5 years ago

  v2.0
  🇳🇱Netherlands idebr

  about 2 months ago
• 💬

  Get boolean if TFA is set?

  Closed: outdated

  Code

  Created over 5 years ago

  v
  🇧🇬Bulgaria JustViktor

  about 2 months ago
• 📌

  Automated Drupal 11 compatibility fixes for tfa

  Needs review

  Code

  Created 5 months ago

  v1.0
  project update bot

  about 2 months ago
• 🐛

  plugin_label missing in feedback when TFA setup is canceled

  Active

  Code

  Created 2 months ago

  v1.9
  🇩🇪Germany lmoeni

  about 2 months ago
• 🐛

  Change heading hierarchy for accessibility purposes

  Active

  Code

  Created 2 months ago

  v1.9
  🇩🇪Germany lmoeni

  2 months ago
• 📌

  SA-CONTRIB-2023-030 and 2.x

  Active

  Code

  Created over 1 year ago

  v2.0
  🇺🇸United States cmlara

  2 months ago
• 💬

  How to enable plugins

  Active

  Documentation

  Created 2 months ago

  v1.0
  stefan927

  2 months ago
• ✨

  Confirmation forms should not require passwords

  Needs review

  Code

  Created about 7 years ago

  v2.0
  🇺🇸United States benjifisher

  2 months ago
• 📌

  Fix Code Coverage reporting

  Active

  Code

  Created 3 months ago

  v1.0
  🇺🇸United States cmlara

  2 months ago
• 💬

  Can we switch site from 2.0.0-apha2 to 8.x-1.7?

  Active

  Documentation

  Created 3 months ago

  v2.0
  🇬🇧United Kingdom arcaic

  2 months ago
• ✨

  Allow Drush uli login command to bypass TFA

  Needs work

  Code

  Created over 9 years ago

  v2.0
  🇨🇦Canada scor

  2 months ago
• 🐛

  TFA Pages: Mermaid graphs not loading

  Active

  Documentation

  Created 3 months ago

  v2.0
  🇺🇸United States cmlara

  3 months ago
• 💬

  TFA branch 2 reported by drupal.org as affected by SA-CONTRIB-2023-030

  Active

  Documentation

  Created 3 months ago

  v2.0
  🇪🇸Spain pcambra

  3 months ago
• 🐛

  Only show default plugin when TFA disabled and hide skip validation attempts if disabled

  Active

  Code

  Created 3 months ago

  v2.0
  🇺🇸United States jsutta

  3 months ago
• 📌

  The official abbreviation is 2FA

  Active

  User interface

  Created almost 2 years ago

  v2.0
  🇭🇺Hungary pasqualle

  3 months ago
• 🐛

  Respect DB prefix for running drush sql:sanitize

  Fixed

  Code

  Created about 2 years ago

  v2.0
  🇬🇧United Kingdom somersoft

  3 months ago
• ✨

  provide an option to skip sql sanitization for tfa

  Needs work

  Code

  Created over 1 year ago

  v2.0
  🇮🇳India shivamitakari

  3 months ago
• 📌

  Use an EventSubscriber to process one time login links

  Needs work

  Code

  Created about 1 year ago

  v2.0
  🇺🇸United States cmlara

  3 months ago
• 🦘

  Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043

  Fixed

  Missing component

  Created 3 months ago

  v
  Drupal Security Team

  3 months ago
• ✨

  Allow use with Email Registration module

  Active

  Code

  Created 3 months ago

  v1.0
  🇯🇵Japan ptmkenny

  3 months ago
• 🐛

  Check if Help module is enabled

  Fixed

  User interface

  Created almost 9 years ago

  v2.0
  🇳🇱Netherlands michaelmol

  3 months ago
• 🐛

  Incompatibility with mail_login module using REST login

  Active

  Code

  Created 4 months ago

  v1.7
  🇺🇸United States delzhand

  3 months ago
• 🐛

  when doing drush uli get "Unexpected Access Fault"

  Closed: duplicate

  Code

  Created 3 months ago

  v2.0
  🇺🇸United States dianacastillo

  3 months ago
• 🐛

  2.x-dev incompatible with other modules calling user_login_finalize()

  Fixed

  Code

  Created 10 months ago

  v2.0
  🇺🇸United States grasmash

  3 months ago
• 🐛

  TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface

  Fixed

  Code

  Created 5 months ago

  v2.0
  🇺🇸United States beunerd

  3 months ago
• 📌

  Remove 'sms' from tfa_user_settings

  Fixed

  Code

  Created over 1 year ago

  v2.0
  🇺🇸United States cmlara

  3 months ago
• 🐛

  The "tfa_trusted_browser" plugin does not exist.

  Needs work

  Code

  Created 9 months ago

  v1.5
  🇳🇱Netherlands joshahubbers

  3 months ago
• 🐛

  Two factor authentication security code input is not focused

  Active

  Code

  Created 10 months ago

  v1.0
  🇪🇪Estonia pjotr.savitski

  3 months ago
• ✨

  Force user to setup TFA when required and there are no remaining skips

  Needs work

  Code

  Created over 3 years ago

  v2.0
  🇧🇬Bulgaria SimeonKesmev

  3 months ago
• ✨

  Support Simple Password Reset module

  Postponed

  Code

  Created 3 months ago

  v2.0
  🇰🇬Kyrgyzstan elaman

  3 months ago
• 🐛

  error when hitting login button after requesting a password reset

  Closed: duplicate

  Code

  Created 7 months ago

  v2.0
  🇺🇸United States dianacastillo

  3 months ago
• 🐛

  Encrypt error with php 8.1

  Closed: cannot reproduce

  Code

  Created about 1 year ago

  v1.0
  🇳🇱Netherlands zebda

  4 months ago
• 🐛

  TfaLoginController enforces opaque form expiration

  Active

  Code

  Created about 1 year ago

  v2.0
  🇩🇪Germany giuspe

  4 months ago
• 💬

  Adjust the deny access time limit with tfa email plugin for a user

  Closed: duplicate

  Code

  Created 4 months ago

  v1.0
  🇦🇺Australia Nadim Hossain

  4 months ago
• ✨

  QR code difficult to see on dark mode themes

  Needs work

  User interface

  Created 5 months ago

  v2.0
  🇳🇿New Zealand chroid

  4 months ago
• 🐛

  Creation of dynamic property Drupal\tfa\Plugin\Tfa\TfaTotp::$isValid is deprecated

  Fixed

  Code

  Created over 1 year ago

  v2.0
  🇺🇸United States markdorison

  5 months ago
• 📌

  Warn users that TFA is incompatible with modules overiding specific routes

  Active

  Documentation

  Created 6 months ago

  v1.0
  🇳🇿New Zealand RoSk0

  5 months ago
• 💬

  Translation file for tfa 8.x-1.3 module release not found

  Closed: duplicate

  Code

  Created about 1 year ago

  v1.3
  🇩🇪Germany hexabinaer

  6 months ago
• ✨

  Support TFA on sites with LDAP authentication

  Closed: duplicate

  Code

  Created almost 8 years ago

  v1.0
  🇮🇪Ireland stella

  6 months ago
• ✨

  Change autocomplete attribute to 'one-time-code'

  Needs work

  Code

  Created 6 months ago

  v2.0
  🇳🇱Netherlands nvandijk

  6 months ago
• 📌

  Fix phpcs issues

  Fixed

  Code

  Created 7 months ago

  v2.0
  🇵🇹Portugal jcnventura

  6 months ago
• 📌

  Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface

  Needs work

  Code

  Created 8 months ago

  v1.0
  🇺🇸United States andyg5000

  6 months ago
• 💬

  Will TFA work along with masquerade ?

  Closed: cannot reproduce

  Code

  Created 7 months ago

  v1.7
  🇮🇳India bharath-kondeti

  7 months ago
• ✨

  TFA module with headless Drupal

  Active

  Code

  Created 8 months ago

  v2.0
  🇫🇷France jibus

  7 months ago
• ✨

  Allow for formatted help text on login form

  Needs work

  Code

  Created over 4 years ago

  v2.0
  🇺🇸United States michael_wojcik

  7 months ago
• ✨

  Allow TFA requirement to be configured per user

  Needs work

  Code

  Created about 2 years ago

  v2.0
  🇦🇺Australia dpi

  8 months ago
• 🐛

  The "skip step"/"skip and finish" button UX is confusing because the error "TFA setup canceled" is then shown when clicked

  Postponed: needs info

  User interface

  Created 10 months ago

  v1.0
  🇬🇧United Kingdom alexharries

  8 months ago
• 📌

  Add drush as a development dependency

  Fixed

  Code

  Created 8 months ago

  v2.0
  🇺🇸United States cmlara

  8 months ago
• 📌

  Add GitLab CI D7

  Fixed

  Code

  Created 9 months ago

  v2.0
  🇸🇰Slovakia poker10

  8 months ago
• 🐛

  Creation of dynamic property TfaTestCase::$web_user is deprecated

  Fixed

  Code

  Created 9 months ago

  v2.0
  🇸🇰Slovakia poker10

  8 months ago
• ✨

  Create a drush command to disable the TFA of any user.

  Closed: duplicate

  Code

  Created 9 months ago

  v1.0
  🇮🇳India rahulrasgon

  9 months ago
• 🐛

  Views "TFA status" field wrong output

  Active

  Code

  Created 9 months ago

  v2.0
  🇧🇪Belgium Den Tweed

  9 months ago
• 📌

  Evaluate if allowUserSetupAccess should be on API or removed

  Active

  Code

  Created 9 months ago

  v2.0
  🇺🇸United States cmlara

  9 months ago
• 📌

  Add "role-based requirements" to module page

  Fixed

  Documentation

  Created 10 months ago

  v2.0
  🇺🇸United States froboy

  9 months ago
• 📌

  Document TFA disables Core User Login block

  Active

  Documentation

  Created 9 months ago

  v1.0
  🇬🇧United Kingdom alexharries

  9 months ago
• 🐛

  Installing contrib modules can lead to TFA accidently being bypassed

  Fixed

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  9 months ago
• 🐛

  Don't send notification emails when enabling trusted browser

  Needs work

  Code

  Created 10 months ago

  v1.5
  🇫🇮Finland ZeiP

  10 months ago
• 📌

  Fix install instruction on project-page

  Postponed: needs info

  Documentation

  Created 10 months ago

  v1.0
  🇳🇱Netherlands joshahubbers

  10 months ago
• 🐛

  tfa.cache.memcache is not using memory cache backend

  Fixed

  Code

  Created 11 months ago

  v2.0
  🇺🇸United States cmlara

  10 months ago
• 💬

  Migration from Drupal 7 to Drupal 9

  Active

  Miscellaneous

  Created about 2 years ago

  v1.0
  🇺🇸United States jsutta

  10 months ago
• 🐛

  Resolve SA-CONTRIB-2024-003 in 2.x branch

  Active

  Code

  Created 11 months ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 📌

  [Feb 7th] Public followup for SA-CONTRIB-2023-003

  Active

  Code

  Created 11 months ago

  v1.0
  🇺🇸United States cmlara

  11 months ago
• ✨

  Create "Email one-time-code" Validation Plugin & related Setup Plugin

  Closed: outdated

  Code

  Created about 7 years ago

  v2.0
  🇺🇸United States daggerhart

  11 months ago
• 🌱

  Roadmap for 2.0.0 release

  Active

  Miscellaneous

  Created over 1 year ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 📌

  Add support for Gitlab Pages and move some data from README

  Fixed

  Documentation

  Created about 1 year ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 🐛

  validateRequest() does not convert integers to zero padded strings before calling validate()

  Fixed

  Code

  Created 12 months ago

  v1.0
  🇺🇸United States cmlara

  11 months ago
• 🐛

  "validation skipped" value keeps incrementing, locks out users

  Closed: outdated

  Code

  Created about 1 year ago

  v2.0
  jeremy_estes

  11 months ago
• 📌

  Restore Code Coverage reporting to GitLab CI Runs

  Fixed

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 🐛

  Import 8.x-1.4 security fix into 2.x

  Fixed

  Code

  Created about 1 year ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• ✨

  Redirect to validation setup after login without tfa

  Fixed

  Code

  Created almost 5 years ago

  v1.0
  🇺🇸United States zopa

  11 months ago
• 📌

  10.2.0 Deprecation Clenaup

  Fixed

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 🐛

  user.data service returns strings not integers

  Fixed

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  11 months ago
• 📌

  Remove referneces to Twillo Authy desktop apps

  Active

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  12 months ago
• 🐛

  TFA switches to dev branch

  Closed: cannot reproduce

  Miscellaneous

  Created 12 months ago

  v1.4
  🇺🇸United States trigve hagen

  12 months ago
• 📌

  Public Followup for 8.x-1.3 security release.

  Fixed

  Documentation

  Created about 1 year ago

  v1.0
  🇺🇸United States cmlara

  12 months ago
• 📌

  Switch to spomky-labs/otphp

  Fixed

  Miscellaneous

  Created about 2 years ago

  v2.0
  🇵🇹Portugal jcnventura

  12 months ago
• 💬

  Cannot update form front end?

  Fixed

  User interface

  Created about 1 year ago

  v2.0
  obsidianicon

  12 months ago
• ✨

  Allow TFA authentication through REST routes

  Closed: outdated

  Code

  Created over 1 year ago

  v2.0
  🇺🇸United States cmlara

  12 months ago
• ✨

  Support Symfony Mailer

  Needs work

  Code

  Created 12 months ago

  v2.0
  🇳🇱Netherlands tess bakker

  12 months ago
• ✨

  Provide drush command to reset a user's TFA data

  Fixed

  Code

  Created over 1 year ago

  v1.0
  🇦🇺Australia silverham

  12 months ago
• 📌

  Remove TfaUserDataTrait and refactor to a TfaUserData object.

  Active

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  12 months ago
• 🌱

  [META] Convert fail-open code executions to fail-secure alternatives

  Active

  Code

  Created 12 months ago

  v2.0
  🇺🇸United States cmlara

  12 months ago
• 🐛

  Wrong domain name for Google Authenticator on TOTP and HOTP setup page

  Closed: duplicate

  Miscellaneous

  Created about 1 year ago

  v2.0
  🇮🇳India bhanu951

  about 1 year ago
• 🐛

  Trusted browser message when set to 1 day is "1 days" plural

  Fixed

  Code

  Created almost 2 years ago

  v2.0
  🇬🇧United Kingdom dunx

  about 1 year ago