Two-factor Authentication (TFA) merge requests

Contrib.social

Project: Two-factor Authentication (TFA)

Merge requests

!122Resolve SA-CONTRIB-2024-003 in 2.x branch
Open
Show issue
🇺🇸United States cmlara
updated 3 days ago
!120Only show default plugin when TFA disabled and hide skip validation attempts if disabled
Open
Show issue
🇺🇸United States jsutta
updated 7 days ago
!114Public followup for SA-CONTRIB-2024-043
Open
Show issue
🇺🇸United States cmlara
updated 7 days ago
!121Tugboat previews
Open
Show issue
🇺🇸United States dmundra
updated 9 days ago
!119Public followup for SA-CONTRIB-2025-023
Merged
Show issue
🇺🇸United States cmlara
updated 17 days ago
!57Use an EventSubscriber to protect one time login links
Merged
Show issue
🇺🇸United States cmlara
updated 17 days ago
!118Fix isTfaDisabled
Open
Show issue
🇨🇭Switzerland milanbombschliip
updated 27 days ago
!117TfaPluginManager should use ConfigFactory not ImmutableConfig
Merged
Show issue
🇺🇸United States cmlara
updated 27 days ago
!110ParagonIE\ConstantTime\Encoding dependency not installed from TFA
Open
Show issue
seeduardo
updated about 1 month ago
!76[Feb 7th] Public followup for SA-CONTRIB-2023-003
Open
Show issue
🇺🇸United States cmlara
updated about 1 month ago
!115Support `user.reset` route that can be used by Drush or Simple Pass Reset module
Closed
Show issue
🇰🇬Kyrgyzstan elaman
updated about 2 months ago
!116Deprecations PHP 8.4
Open
Show issue
🇧🇾Belarus beloglazov91
updated about 2 months ago
!97Public followup for SA-CONTRIB-2024-043
Merged
Show issue
🇺🇸United States cmlara
updated about 2 months ago
!108Cleanup cSpell GitLab Warnings
Merged
Show issue
🇺🇸United States cmlara
updated about 2 months ago
!113Issue #3505295 by cmlara: Configure gitlab_templates PHPUnit stage to not use core phpunit.xml
Merged
🇺🇸United States cmlara
updated about 2 months ago
!112Revert PHPUnit Stage to not use core phpunit.xml
Merged
Show issue
🇺🇸United States cmlara
updated about 2 months ago
!111Redirect to TFA doesn't work with login destination modules
Merged
Show issue
🇧🇾Belarus gun_dose
updated about 2 months ago
!2User is redirected to TFA page after login even with TFA disabled
Closed
Show issue
Unnamed author
updated 3 months ago
!109Class 'Base32\Base32' not found - switch library to paragonie/constant_time_encoding
Open
Show issue
seeduardo
updated 3 months ago
!104Cleanup cSpell GitLab Warnings
Merged
Show issue
🇺🇸United States cmlara
updated 3 months ago
!107Implement Drupal\user\UserAuthenticationInterface
Open
Show issue
🇭🇺Hungary imre.horjan
updated 3 months ago
!106Deprecations PHP 8.4
Merged
Show issue
🇮🇳India chandansha
updated 3 months ago
!105Use #config_target for the settings form
Open
Show issue
🇮🇳India kalash-j
updated 4 months ago
!103Drupal Core Tests now use one time login links instead of user form
Merged
Show issue
🇺🇸United States cmlara
updated 4 months ago
!102Cleanup TfaUserDataTrait phpstan warnings
Merged
Show issue
🇺🇸United States cmlara
updated 4 months ago
!101Cleanup TfaUserDataTrait phpstan warnings
Merged
Show issue
🇺🇸United States cmlara
updated 4 months ago
!100Redirect correctly after first time plugin setup
Open
Show issue
🇮🇳India sayan_k_dutta
updated 4 months ago
!99Issue #3487347 by rosk0, cmlara: Admin cannot disable TFA for a user
Merged
🇺🇸United States cmlara
updated 5 months ago
!98Admin cannot disable TFA for a user
Merged
Show issue
🇳🇿New Zealand RoSk0
updated 5 months ago
!90Use an EventSubscriber to protect one time login links
Open
Show issue
🇰🇬Kyrgyzstan elaman
updated 5 months ago
!96Add a Views filter for the 'TFA enabled' field
Open
Show issue
Unnamed author
updated 5 months ago
!94plugin_label missing in feedback when TFA setup is canceled
Merged
Show issue
🇩🇪Germany lmoeni
updated 6 months ago
!95Change heading hierarchy for accessibility purposes
Open
Show issue
🇩🇪Germany lmoeni
updated 6 months ago
!91Add D11 Support
Merged
Show issue
🇺🇸United States cmlara
updated 6 months ago
!93Issue #3478161: Restore Code Coverage Reporting
Merged
🇺🇸United States cmlara
updated 6 months ago
!92Fix Code Coverage reporting
Merged
Show issue
🇺🇸United States cmlara
updated 6 months ago
!88Incompatibility with mail_login module using REST login
Closed
Show issue
🇺🇸United States delzhand
updated 7 months ago
!89Force user to setup TFA when required and there are no remaining skips
Open
Show issue
🇮🇱Israel jkdev
updated 7 months ago
!772.x-dev incompatible with other modules calling user_login_finalize()
Merged
Show issue
🇺🇸United States cmlara
updated 7 months ago
!86TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface
Merged
Show issue
🇺🇸United States beunerd
updated 7 months ago
!87TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface
Merged
Show issue
🇮🇳India sourav_paul
updated 7 months ago
!37Remove 'sms' from tfa_user_settings
Merged
Show issue
🇮🇳India kalash-j
updated 7 months ago
!85Automated Drupal 11 compatibility fixes for tfa
Open
Show issue
project update bot
updated 9 months ago
!84Change autocomplete attribute to 'one-time-code'
Open
Show issue
🇳🇱Netherlands nvandijk
updated 10 months ago
!83Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface
Open
Show issue
🇮🇳India zaryab_drupal
updated 10 months ago
!82Remove 'sms' from tfa_user_settings
Closed
Show issue
🇮🇳India kalash-j
updated 11 months ago
!81Add drush as a development dependency
Merged
Show issue
🇺🇸United States cmlara
updated 12 months ago
!80Add drush as a development dependency
Merged
Show issue
🇺🇸United States cmlara
updated 12 months ago
!79Add GitLab CI D7
Merged
Show issue
🇸🇰Slovakia poker10
updated about 1 year ago
!78Creation of dynamic property TfaTestCase::$web_user is deprecated
Merged
Show issue
🇸🇰Slovakia poker10
updated about 1 year ago
!75Contrib modules can bypass TFA authentication
Merged
Show issue
🇺🇸United States cmlara
updated about 1 year ago
!74tfa.cache.memcache is not using memory cache backend
Merged
Show issue
🇺🇸United States cmlara
updated about 1 year ago
!73Add support for Gitlab Pages and move some data from README
Merged
Show issue
🇺🇸United States cmlara
updated about 1 year ago
!72validateRequest() does not convert integers to zero padded strings before calling validate()
Merged
Show issue
🇺🇸United States cmlara
updated about 1 year ago
!71Restore Code Coverage reporting to GitLab CI Runs
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!65Import 8.x-1.4 security fix into 2.x
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!63Redirect to validation setup after login without tfa
Merged
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!7010.2.0 Deprecation Clenaup
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!6910.2.0 Deprecation Clenaup
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!67user.data service returns strings not integers
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!68Support Symfony Mailer
Open
Show issue
🇳🇱Netherlands tess bakker
updated over 1 year ago
!64Add ECA condition plugin "is TFA setup"
Open
Show issue
🇦🇺Australia sime
updated over 1 year ago
!66Switch to spomky-labs/otphp
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!61Public Followup for 8.x-1.3 security release.
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!58Redirect to validation setup after login without tfa
Merged
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!62Provide drush command to reset a user's TFA data
Merged
Show issue
🇮🇳India praneeth_22
updated over 1 year ago
!47Wrong domain name for Google Authenticator on TOTP and HOTP setup page
Closed
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!55Authenticator links clean up
Merged
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!48Authenticator links clean up
Merged
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!22Trusted browser message when set to 1 day is "1 days" plural
Closed
Show issue
🇬🇧United Kingdom technoveltyco
updated over 1 year ago
!13Issue #2930355: One-time login link bypasses TFA
Closed
🇦🇺Australia mingsong
updated over 1 year ago
!29Decorate the user.auth service
Merged
Show issue
🇺🇸United States cmlara
updated over 1 year ago
!59Provide drush command to reset a user's TFA data
Merged
Show issue
🇮🇳India bhanu951
updated over 1 year ago
!56Allow TFA bypass during password reset by default for super admin (uid1)
Closed
Show issue
🇮🇳India bhanu951
updated over 1 year ago

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024

Merge requests

!122Resolve SA-CONTRIB-2024-003 in 2.x branchOpen Show issue

!120Only show default plugin when TFA disabled and hide skip validation attempts if disabledOpen Show issue

!114Public followup for SA-CONTRIB-2024-043Open Show issue

!121Tugboat previewsOpen Show issue

!119Public followup for SA-CONTRIB-2025-023Merged Show issue

!57Use an EventSubscriber to protect one time login linksMerged Show issue

!118Fix isTfaDisabledOpen Show issue

!117TfaPluginManager should use ConfigFactory not ImmutableConfigMerged Show issue

!110ParagonIE\ConstantTime\Encoding dependency not installed from TFAOpen Show issue

!76[Feb 7th] Public followup for SA-CONTRIB-2023-003Open Show issue

!115Support `user.reset` route that can be used by Drush or Simple Pass Reset moduleClosed Show issue

!116Deprecations PHP 8.4Open Show issue

!97Public followup for SA-CONTRIB-2024-043Merged Show issue

!108Cleanup cSpell GitLab WarningsMerged Show issue

!113Issue #3505295 by cmlara: Configure gitlab_templates PHPUnit stage to not use core phpunit.xmlMerged

!112Revert PHPUnit Stage to not use core phpunit.xmlMerged Show issue

!111Redirect to TFA doesn't work with login destination modulesMerged Show issue

!2User is redirected to TFA page after login even with TFA disabledClosed Show issue

!109Class 'Base32\Base32' not found - switch library to paragonie/constant_time_encodingOpen Show issue

!104Cleanup cSpell GitLab WarningsMerged Show issue

!107Implement Drupal\user\UserAuthenticationInterfaceOpen Show issue

!106Deprecations PHP 8.4Merged Show issue

!105Use #config_target for the settings formOpen Show issue

!103Drupal Core Tests now use one time login links instead of user formMerged Show issue

!102Cleanup TfaUserDataTrait phpstan warningsMerged Show issue

!101Cleanup TfaUserDataTrait phpstan warningsMerged Show issue

!100Redirect correctly after first time plugin setupOpen Show issue

!99Issue #3487347 by rosk0, cmlara: Admin cannot disable TFA for a userMerged

!98Admin cannot disable TFA for a userMerged Show issue

!90Use an EventSubscriber to protect one time login linksOpen Show issue

!96Add a Views filter for the 'TFA enabled' fieldOpen Show issue

!94plugin_label missing in feedback when TFA setup is canceledMerged Show issue

!95Change heading hierarchy for accessibility purposesOpen Show issue

!91Add D11 SupportMerged Show issue

!93Issue #3478161: Restore Code Coverage ReportingMerged

!92Fix Code Coverage reportingMerged Show issue

!88Incompatibility with mail_login module using REST loginClosed Show issue

!89Force user to setup TFA when required and there are no remaining skipsOpen Show issue

!772.x-dev incompatible with other modules calling user_login_finalize()Merged Show issue

!86TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterfaceMerged Show issue

!87TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterfaceMerged Show issue

!37Remove 'sms' from tfa_user_settingsMerged Show issue

!85Automated Drupal 11 compatibility fixes for tfaOpen Show issue

!84Change autocomplete attribute to 'one-time-code'Open Show issue

!83Incorrect typehint \Drupal\encrypt\EncryptionProfileInterfaceOpen Show issue

!82Remove 'sms' from tfa_user_settingsClosed Show issue

!81Add drush as a development dependencyMerged Show issue

!80Add drush as a development dependencyMerged Show issue

!79Add GitLab CI D7Merged Show issue

!78Creation of dynamic property TfaTestCase::$web_user is deprecatedMerged Show issue

!75Contrib modules can bypass TFA authenticationMerged Show issue

!74tfa.cache.memcache is not using memory cache backendMerged Show issue

!73Add support for Gitlab Pages and move some data from READMEMerged Show issue

!72validateRequest() does not convert integers to zero padded strings before calling validate()Merged Show issue

!71Restore Code Coverage reporting to GitLab CI RunsMerged Show issue

!65Import 8.x-1.4 security fix into 2.xMerged Show issue

!63Redirect to validation setup after login without tfaMerged Show issue

!7010.2.0 Deprecation ClenaupMerged Show issue

!6910.2.0 Deprecation ClenaupMerged Show issue

!67user.data service returns strings not integersMerged Show issue

!68Support Symfony MailerOpen Show issue

!64Add ECA condition plugin "is TFA setup"Open Show issue

!66Switch to spomky-labs/otphpMerged Show issue

!61Public Followup for 8.x-1.3 security release.Merged Show issue

!58Redirect to validation setup after login without tfaMerged Show issue

!62Provide drush command to reset a user's TFA dataMerged Show issue

!47Wrong domain name for Google Authenticator on TOTP and HOTP setup pageClosed Show issue

!55Authenticator links clean upMerged Show issue

!48Authenticator links clean upMerged Show issue

!22Trusted browser message when set to 1 day is "1 days" pluralClosed Show issue

!13Issue #2930355: One-time login link bypasses TFAClosed

!29Decorate the user.auth serviceMerged Show issue

!59Provide drush command to reset a user's TFA dataMerged Show issue

!56Allow TFA bypass during password reset by default for super admin (uid1)Closed Show issue

!122Resolve SA-CONTRIB-2024-003 in 2.x branch
Open
Show issue

!120Only show default plugin when TFA disabled and hide skip validation attempts if disabled
Open
Show issue

!114Public followup for SA-CONTRIB-2024-043
Open
Show issue

!121Tugboat previews
Open
Show issue

!119Public followup for SA-CONTRIB-2025-023
Merged
Show issue

!57Use an EventSubscriber to protect one time login links
Merged
Show issue

!118Fix isTfaDisabled
Open
Show issue

!117TfaPluginManager should use ConfigFactory not ImmutableConfig
Merged
Show issue

!110ParagonIE\ConstantTime\Encoding dependency not installed from TFA
Open
Show issue

!76[Feb 7th] Public followup for SA-CONTRIB-2023-003
Open
Show issue

!115Support `user.reset` route that can be used by Drush or Simple Pass Reset module
Closed
Show issue

!116Deprecations PHP 8.4
Open
Show issue

!97Public followup for SA-CONTRIB-2024-043
Merged
Show issue

!108Cleanup cSpell GitLab Warnings
Merged
Show issue

!113Issue #3505295 by cmlara: Configure gitlab_templates PHPUnit stage to not use core phpunit.xml
Merged

!112Revert PHPUnit Stage to not use core phpunit.xml
Merged
Show issue

!111Redirect to TFA doesn't work with login destination modules
Merged
Show issue

!2User is redirected to TFA page after login even with TFA disabled
Closed
Show issue

!109Class 'Base32\Base32' not found - switch library to paragonie/constant_time_encoding
Open
Show issue

!104Cleanup cSpell GitLab Warnings
Merged
Show issue

!107Implement Drupal\user\UserAuthenticationInterface
Open
Show issue

!106Deprecations PHP 8.4
Merged
Show issue

!105Use #config_target for the settings form
Open
Show issue

!103Drupal Core Tests now use one time login links instead of user form
Merged
Show issue

!102Cleanup TfaUserDataTrait phpstan warnings
Merged
Show issue

!101Cleanup TfaUserDataTrait phpstan warnings
Merged
Show issue

!100Redirect correctly after first time plugin setup
Open
Show issue

!99Issue #3487347 by rosk0, cmlara: Admin cannot disable TFA for a user
Merged

!98Admin cannot disable TFA for a user
Merged
Show issue

!90Use an EventSubscriber to protect one time login links
Open
Show issue

!96Add a Views filter for the 'TFA enabled' field
Open
Show issue

!94plugin_label missing in feedback when TFA setup is canceled
Merged
Show issue

!95Change heading hierarchy for accessibility purposes
Open
Show issue

!91Add D11 Support
Merged
Show issue

!93Issue #3478161: Restore Code Coverage Reporting
Merged

!92Fix Code Coverage reporting
Merged
Show issue

!88Incompatibility with mail_login module using REST login
Closed
Show issue

!89Force user to setup TFA when required and there are no remaining skips
Open
Show issue

!772.x-dev incompatible with other modules calling user_login_finalize()
Merged
Show issue

!86TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface
Merged
Show issue

!87TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface
Merged
Show issue

!37Remove 'sms' from tfa_user_settings
Merged
Show issue

!85Automated Drupal 11 compatibility fixes for tfa
Open
Show issue

!84Change autocomplete attribute to 'one-time-code'
Open
Show issue

!83Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface
Open
Show issue

!82Remove 'sms' from tfa_user_settings
Closed
Show issue

!81Add drush as a development dependency
Merged
Show issue

!80Add drush as a development dependency
Merged
Show issue

!79Add GitLab CI D7
Merged
Show issue

!78Creation of dynamic property TfaTestCase::$web_user is deprecated
Merged
Show issue

!75Contrib modules can bypass TFA authentication
Merged
Show issue

!74tfa.cache.memcache is not using memory cache backend
Merged
Show issue

!73Add support for Gitlab Pages and move some data from README
Merged
Show issue

!72validateRequest() does not convert integers to zero padded strings before calling validate()
Merged
Show issue

!71Restore Code Coverage reporting to GitLab CI Runs
Merged
Show issue

!65Import 8.x-1.4 security fix into 2.x
Merged
Show issue

!63Redirect to validation setup after login without tfa
Merged
Show issue

!7010.2.0 Deprecation Clenaup
Merged
Show issue

!6910.2.0 Deprecation Clenaup
Merged
Show issue

!67user.data service returns strings not integers
Merged
Show issue

!68Support Symfony Mailer
Open
Show issue

!64Add ECA condition plugin "is TFA setup"
Open
Show issue

!66Switch to spomky-labs/otphp
Merged
Show issue

!61Public Followup for 8.x-1.3 security release.
Merged
Show issue

!58Redirect to validation setup after login without tfa
Merged
Show issue

!62Provide drush command to reset a user's TFA data
Merged
Show issue

!47Wrong domain name for Google Authenticator on TOTP and HOTP setup page
Closed
Show issue

!55Authenticator links clean up
Merged
Show issue

!48Authenticator links clean up
Merged
Show issue

!22Trusted browser message when set to 1 day is "1 days" plural
Closed
Show issue

!13Issue #2930355: One-time login link bypasses TFA
Closed

!29Decorate the user.auth service
Merged
Show issue

!59Provide drush command to reset a user's TFA data
Merged
Show issue

!56Allow TFA bypass during password reset by default for super admin (uid1)
Closed
Show issue