Merge requests

• !149Issue #3531309 by jvollebregt-swis: Use Url->access to check for adding a link to tfa.disable

  Open

  Unnamed author

  updated 7 days ago

• !145Allowing authenticated users access to setup adds misleading message to config form

  Open

  Show issue

  🇬🇧United Kingdom scott_euser

  updated 8 days ago

• !114Public followup for SA-CONTRIB-2024-043

  Open

  Show issue

  🇺🇸United States cmlara

  updated 9 days ago

• !146Make QR account name configurable

  Open

  Show issue

  🇺🇸United States cmlara

  updated 10 days ago

• !148Public followup for SA-CONTRIB-2025-023

  Open

  Show issue

  🇺🇸United States cmlara

  updated 10 days ago

• !9Login plugin to skip TFA from trusted IP addresses

  Closed

  Show issue

  Unnamed author

  updated 12 days ago

• !140Convert plugins to use PHP Attributes only.

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 12 days ago

• !147testTfaLogin() sendin fields that do not exist to TFA Config form

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 15 days ago

• !139Remove usage of alreadyAcceptedCode()/storeAccepedCode() in the TOTP,HOTP, Recovery Code plugins.

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 16 days ago

• !137TfaSetupForm overrides form_state storage

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 16 days ago

• !144Allowing authenticated users access to setup adds misleading message to config form

  Open

  Show issue

  🇺🇸United States cmlara

  updated 17 days ago

• !134Evaluate restoring using a form alter instead of extending UserLoginForm

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 18 days ago

• !141Increase minimum requierments for 2.x branch

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 18 days ago

• !143Allowing authenticated users access to setup adds misleading message to config form

  Merged

  Show issue

  🇬🇧United Kingdom scott_euser

  updated 18 days ago

• !135plugin_label missing in feedback when TFA setup is canceled

  Open

  Show issue

  🇬🇧United Kingdom aaron.ferris

  updated 22 days ago

• !142Remove referneces to Twillo Authy desktop apps

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 25 days ago

• !138Invalid application code if time is out of sync on server and client

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 28 days ago

• !136Remove referneces to Twillo Authy desktop apps

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 30 days ago

• !83Incorrect typehint \Drupal\encrypt\EncryptionProfileInterface

  Merged

  Show issue

  🇮🇳India zaryab_drupal

  updated about 1 month ago

• !133QR code difficult to see on dark mode themes

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 month ago

• !132QR code difficult to see on dark mode themes

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 month ago

• !126Document how to use TFA with REST

  Closed

  Show issue

  🇬🇧United Kingdom scott_euser

  updated about 1 month ago

• !129Document how to use TFA with REST

  Merged

  Show issue

  🇬🇧United Kingdom scott_euser

  updated about 1 month ago

• !131Issue #3521301 by scott_euser: Fix composer deprecation warning

  Merged

  🇺🇸United States cmlara

  updated about 1 month ago

• !127Fix composer deprecation warning

  Merged

  Show issue

  🇬🇧United Kingdom scott_euser

  updated about 1 month ago

• !122Resolve SA-CONTRIB-2024-003 in 2.x branch

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 month ago

• !128Cleanup PHPStan Baseline

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 month ago

• !130One setup step remaining, two QR Code Scans required

  Open

  Show issue

  🇬🇧United Kingdom james.williams

  updated about 2 months ago

• !120Only show default plugin when TFA disabled and hide skip validation attempts if disabled

  Open

  Show issue

  🇺🇸United States jsutta

  updated about 2 months ago

• !90Use an EventSubscriber to protect one time login links

  Closed

  Show issue

  🇰🇬Kyrgyzstan elaman

  updated 2 months ago

• !109Class 'Base32\Base32' not found - switch library to paragonie/constant_time_encoding

  Closed

  Show issue

  seeduardo

  updated 2 months ago

• !110ParagonIE\ConstantTime\Encoding dependency not installed from TFA

  Merged

  Show issue

  seeduardo

  updated 2 months ago

• !125Cleanup PHPStan Baseline

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 2 months ago

• !124Insufficient entropy in loginHash generation

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 2 months ago

• !123Insufficient entropy in loginHash generation

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 2 months ago

• !121Tugboat previews

  Open

  Show issue

  🇺🇸United States dmundra

  updated 3 months ago

• !119Public followup for SA-CONTRIB-2025-023

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 3 months ago

• !57Use an EventSubscriber to protect one time login links

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 3 months ago

• !118Fix isTfaDisabled

  Open

  Show issue

  🇨🇭Switzerland milanbombschliip

  updated 4 months ago

• !117TfaPluginManager should use ConfigFactory not ImmutableConfig

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 4 months ago

• !76[Feb 7th] Public followup for SA-CONTRIB-2023-003

  Open

  Show issue

  🇺🇸United States cmlara

  updated 4 months ago

• !115Support `user.reset` route that can be used by Drush or Simple Pass Reset module

  Closed

  Show issue

  🇰🇬Kyrgyzstan elaman

  updated 4 months ago

• !116Deprecations PHP 8.4

  Open

  Show issue

  🇧🇾Belarus beloglazov91

  updated 4 months ago

• !97Public followup for SA-CONTRIB-2024-043

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 5 months ago

• !108Cleanup cSpell GitLab Warnings

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 5 months ago

• !113Issue #3505295 by cmlara: Configure gitlab_templates PHPUnit stage to not use core phpunit.xml

  Merged

  🇺🇸United States cmlara

  updated 5 months ago

• !112Revert PHPUnit Stage to not use core phpunit.xml

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 5 months ago

• !111Redirect to TFA doesn't work with login destination modules

  Merged

  Show issue

  🇧🇾Belarus gun_dose

  updated 5 months ago

• !2User is redirected to TFA page after login even with TFA disabled

  Closed

  Show issue

  Unnamed author

  updated 5 months ago

• !104Cleanup cSpell GitLab Warnings

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 6 months ago

• !107Implement Drupal\user\UserAuthenticationInterface

  Open

  Show issue

  🇭🇺Hungary imre.horjan

  updated 6 months ago

• !106Deprecations PHP 8.4

  Merged

  Show issue

  🇮🇳India chandansha

  updated 6 months ago

• !105Use #config_target for the settings form

  Open

  Show issue

  🇮🇳India kalash-j

  updated 7 months ago

• !103Drupal Core Tests now use one time login links instead of user form

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 7 months ago

• !102Cleanup TfaUserDataTrait phpstan warnings

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 7 months ago

• !101Cleanup TfaUserDataTrait phpstan warnings

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 7 months ago

• !100Redirect correctly after first time plugin setup

  Open

  Show issue

  🇮🇳India sayan_k_dutta

  updated 7 months ago

• !99Issue #3487347 by rosk0, cmlara: Admin cannot disable TFA for a user

  Merged

  🇺🇸United States cmlara

  updated 7 months ago

• !98Admin cannot disable TFA for a user

  Merged

  Show issue

  🇳🇿New Zealand RoSk0

  updated 7 months ago

• !96Add a Views filter for the 'TFA enabled' field

  Open

  Show issue

  Unnamed author

  updated 8 months ago

• !94plugin_label missing in feedback when TFA setup is canceled

  Merged

  Show issue

  🇩🇪Germany lmoeni

  updated 8 months ago

• !95Change heading hierarchy for accessibility purposes

  Open

  Show issue

  🇩🇪Germany lmoeni

  updated 8 months ago

• !91Add D11 Support

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 9 months ago

• !93Issue #3478161: Restore Code Coverage Reporting

  Merged

  🇺🇸United States cmlara

  updated 9 months ago

• !92Fix Code Coverage reporting

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 9 months ago

• !88Incompatibility with mail_login module using REST login

  Closed

  Show issue

  🇺🇸United States delzhand

  updated 9 months ago

• !89Force user to setup TFA when required and there are no remaining skips

  Open

  Show issue

  🇮🇱Israel jkdev

  updated 9 months ago

• !772.x-dev incompatible with other modules calling user_login_finalize()

  Merged

  Show issue

  🇺🇸United States cmlara

  updated 10 months ago

• !86TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface

  Merged

  Show issue

  🇺🇸United States beunerd

  updated 10 months ago

• !87TfaTokenManagement::__construct(): Argument #4 ($logger) should allow \Psr\Log\LoggerInterface

  Merged

  Show issue

  🇮🇳India sourav_paul

  updated 10 months ago

• !37Remove 'sms' from tfa_user_settings

  Merged

  Show issue

  🇮🇳India kalash-j

  updated 10 months ago

• !85Automated Drupal 11 compatibility fixes for tfa

  Open

  Show issue

  project update bot

  updated 11 months ago

• !84Change autocomplete attribute to 'one-time-code'

  Open

  Show issue

  🇳🇱Netherlands nvandijk

  updated about 1 year ago

• !82Remove 'sms' from tfa_user_settings

  Closed

  Show issue

  🇮🇳India kalash-j

  updated about 1 year ago

• !81Add drush as a development dependency

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 year ago

• !80Add drush as a development dependency

  Merged

  Show issue

  🇺🇸United States cmlara

  updated about 1 year ago

• !79Add GitLab CI D7

  Merged

  Show issue

  🇸🇰Slovakia poker10

  updated about 1 year ago

• !78Creation of dynamic property TfaTestCase::$web_user is deprecated

  Merged

  Show issue

  🇸🇰Slovakia poker10

  updated about 1 year ago

• !75Contrib modules can bypass TFA authentication

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !74tfa.cache.memcache is not using memory cache backend

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !73Add support for Gitlab Pages and move some data from README

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !72validateRequest() does not convert integers to zero padded strings before calling validate()

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !71Restore Code Coverage reporting to GitLab CI Runs

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !65Import 8.x-1.4 security fix into 2.x

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !63Redirect to validation setup after login without tfa

  Merged

  Show issue

  🇮🇳India bhanu951

  updated over 1 year ago

• !7010.2.0 Deprecation Clenaup

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !6910.2.0 Deprecation Clenaup

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !67user.data service returns strings not integers

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !68Support Symfony Mailer

  Open

  Show issue

  🇳🇱Netherlands tess bakker

  updated over 1 year ago

• !64Add ECA condition plugin "is TFA setup"

  Open

  Show issue

  🇦🇺Australia sime

  updated over 1 year ago

• !66Switch to spomky-labs/otphp

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !61Public Followup for 8.x-1.3 security release.

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago

• !58Redirect to validation setup after login without tfa

  Merged

  Show issue

  🇮🇳India bhanu951

  updated over 1 year ago

• !62Provide drush command to reset a user's TFA data

  Merged

  Show issue

  🇮🇳India praneeth_22

  updated over 1 year ago

• !47Wrong domain name for Google Authenticator on TOTP and HOTP setup page

  Closed

  Show issue

  🇮🇳India bhanu951

  updated over 1 year ago

• !55Authenticator links clean up

  Merged

  Show issue

  🇮🇳India bhanu951

  updated over 1 year ago

• !48Authenticator links clean up

  Merged

  Show issue

  🇮🇳India bhanu951

  updated over 1 year ago

• !22Trusted browser message when set to 1 day is "1 days" plural

  Closed

  Show issue

  🇬🇧United Kingdom technoveltyco

  updated over 1 year ago

• !13Issue #2930355: One-time login link bypasses TFA

  Closed

  🇦🇺Australia mingsong

  updated over 1 year ago

• !29Decorate the user.auth service

  Merged

  Show issue

  🇺🇸United States cmlara

  updated over 1 year ago