Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
By cmlara on
Change record status:
Draft (View all draft change records)
Project:
Introduced in branch:
8.x-1.x
Introduced in version:
Issue links:
Description:
The services_tfa sub-module has been deprecated with no replacement provided.
In Drupal 7, the services module was the de-facto way for providing REST API for Drupal sites. Drupal 8 provided REST services in core, and as such the presence of the services module is no longer necessary for most Drupal deployments.
The service_tfa module has not provided any server side enforcement of TFA and could only be used for client side validation of TFA tokens.
With the lack of need for the services module on most sites and work being done to directly integrate TFA into the Core REST workflow the module is no longer necessary.
Impacts:
Site builders, administrators, editors
Module developers
