Problem/Motivation

Import security fix from 8.x-1.4 into 2.x dev branch

Steps to reproduce

N/A

Proposed resolution

Import patch, adjust to changes in 2.x

Remaining tasks

Patch

User interface changes

Users will now be prompted for TFA even if their account does not have the default plugin configured.

API changes

None

Data model changes

None

Issue fork tfa-3405017

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

cmlara created an issue. See original summary.

cmlara’s picture

Issue summary: View changes
Status: Active » Fixed

  • cmlara committed 39a5b222 on 2.x
    Issue #3405017: Security Fix: Authentication bypass when default plugin...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.