Change record status: 
Introduced in branch: 
2.x
Introduced in version: 
2.0.0-alpha3
Description: 

The previously optional public function validateRequest(#[\SensitiveParameter] string $code): bool;) is now a required method for plugins implementing TfaValidationInterface.

This method will be called for methods that do not use the typical login form method.

Examples of possible use case may be REST endpoints or user.auth logins not protected by the TFA EntryForm.

Impacts: 
Module developers