|
Clarify supported status with REST module |
Active |
Normal |
Support request |
8.x-1.x-dev |
Documentation |
|
2 days 21 hours |
|
Interested in contributing an email TFA Plugin |
Fixed |
Normal |
Support request |
8.x-1.12 |
Documentation |
abenbow |
1 week 2 days |
|
Logs for failed TFA attempts |
Needs work |
Normal |
Feature request |
2.x-dev |
Code |
|
1 month 3 days |
|
Expand 2.x technical documentation with pre-production audit and enforcement architecture guides |
Needs review |
Normal |
Feature request |
2.x-dev |
Documentation |
|
6 days 20 hours |
|
Full Setup not working on 8.x-1.12 |
Needs review |
Critical |
Bug report |
8.x-1.x-dev |
Code |
|
2 years 3 months |
|
Destination is lost on login when TFA is not required |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
3 weeks 3 days |
|
Support Encrypt 4.x |
Postponed |
Normal |
Task |
8.x-1.x-dev |
Code |
|
1 week 1 day |
|
Require supported versions of core and php |
Fixed |
Normal |
Task |
8.x-1.x-dev |
Code |
|
1 week 2 days |
|
Implicitly marking parameter as nullable is deprecated in PHP8.4 |
Fixed |
Normal |
Task |
8.x-1.x-dev |
Code |
|
1 year 8 months |
|
Every intermediate step of full setup announces "TFA setup complete" |
Active |
Normal |
Bug report |
8.x-1.12 |
Code |
|
1 week 3 days |
|
Offer to co-maintain TFA |
Fixed |
Normal |
Task |
2.x-dev |
Miscellaneous |
|
1 month 1 day |
|
Remove @cmlara from co-maintainer |
Fixed |
Normal |
Task |
2.x-dev |
Miscellaneous |
|
1 week 4 days |
|
Tugboat previews |
Needs work |
Normal |
Feature request |
2.x-dev |
Code |
|
1 year 5 months |
|
HTTP Basic provider ignore may be using wrong provider id |
Active |
Normal |
Bug report |
2.x-dev |
Code |
|
2 weeks 1 day |
|
Use MemoryCacheInterface for cache.tfa_memache |
Active |
Normal |
Task |
2.x-dev |
Code |
|
2 weeks 1 day |
|
Force user to setup TFA when required and there are no remaining skips |
Needs work |
Normal |
Feature request |
2.x-dev |
Code |
|
5 years 2 months |
|
Enable administrators to override the default TOTP label |
Active |
Normal |
Feature request |
2.x-dev |
Code |
|
3 weeks 4 days |
|
Create .mailmap file to correct commiter attribution |
Active |
Normal |
Task |
2.x-dev |
Miscellaneous |
|
3 weeks 6 days |
|
"Skip and finish" cancels the whole setup instead of skipping the step and finishing |
Postponed |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
1 month 4 weeks |
|
Full setup records only the last step: validation plugin (e.g. tfa_totp) missing from enabled plugins in tfa_user_settings |
Postponed |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
1 month 3 weeks |
|
Full setup completion fires on every step: duplicate "setup complete" message and duplicate notification email |
Postponed |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
1 month 3 weeks |
|
Automated Drupal 12 compatibility fixes for tfa 2.x-dev |
Needs review |
Normal |
Task |
2.x-dev |
Code |
|
2 months 3 weeks |
|
"Redirect users on login to TFA Setup Page" not working |
Needs review |
Normal |
Bug report |
8.x-1.12 |
Code |
|
2 months 3 weeks |
|
TfaLoginForm sets the cache max age to zero |
Active |
Normal |
Task |
8.x-1.x-dev |
Code |
|
2 months 2 weeks |
|
TfaLoginContextTrait::canLoginWithoutTfa() uses a "@" placeholder in an href attribute |
Needs review |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
2 months 2 weeks |
|
Support chillerlan/php-qrcode 5.x and 6.x |
Active |
Normal |
Task |
2.x-dev |
Code |
|
1 year 3 months |
|
Gracefully handle EncryptionServiceInterface Exceptions |
Active |
Normal |
Bug report |
2.x-dev |
Code |
|
3 years 7 months |
|
Error "The selected key size does not match the actual size of the key" when setting up key according to README |
Active |
Normal |
Bug report |
8.x-1.x-dev |
Documentation |
|
4 months 1 week |
|
One setup step remaining, two QR Code Scans required |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
User interface |
|
1 year 11 months |
|
TFA password reset flow fatals when one-time login link does not resolve to a valid user |
Needs review |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
4 months 2 weeks |
|
Make the helplinks list a configuration option |
Active |
Normal |
Feature request |
2.x-dev |
Code |
|
5 months 5 days |
|
TFA not working since update to Core 10.6.5 and 10.6.6 |
Postponed (maintainer needs more info) |
Critical |
Bug report |
8.x-1.12 |
Code |
|
5 months 1 week |
|
enable a plugin by default for new users |
Active |
Normal |
Support request |
8.x-1.12 |
Code |
|
7 months 4 days |
|
Add configurable post-setup redirect path (tokens, aliases, <front>) |
Needs work |
Normal |
Feature request |
2.x-dev |
User interface |
|
10 months 2 weeks |
|
The "tfa_trusted_browser" plugin does not exist. |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
2 years 5 months |
|
Remember validation plugin for next login when multiple validation plugins are enabled. |
Active |
Normal |
Feature request |
2.x-dev |
User interface |
|
2 years 11 months |
|
tfa-reset-user drush command broken by docblock documentation |
Active |
Normal |
Bug report |
2.x-dev |
Code |
|
7 months 1 week |
|
Fix CI failures: resolve PHPUnit + PHPStan errors |
Needs review |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
7 months 2 weeks |
|
Address config schema errors on Drupal 11 |
Reviewed & tested by the community |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
8 months 3 days |
|
Don't send notification emails when enabling login plugin |
Needs review |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
2 years 6 months |
|
Only show default plugin when TFA disabled and hide skip validation attempts if disabled |
Needs work |
Normal |
Feature request |
2.x-dev |
Code |
|
1 year 11 months |
|
Use #config_target for the settings form |
Needs work |
Normal |
Task |
2.x-dev |
Code |
|
1 year 9 months |
|
plugin_label missing in feedback when TFA setup is canceled |
Needs review |
Normal |
Bug report |
8.x-1.9 |
Code |
|
1 year 10 months |
|
Secret length not accepted by FreeOTP |
Active |
Normal |
Feature request |
8.x-1.12 |
Code |
|
9 months 2 weeks |
|
Suggestion to only show validation skip status when relevant |
Needs work |
Normal |
Feature request |
2.x-dev |
User interface |
|
5 years 9 months |
|
Visual audit of code execution flows |
Active |
Normal |
Task |
2.x-dev |
Code |
|
11 months 3 weeks |
|
Public followup for SA-CONTRIB-2025-023 |
Needs review |
Normal |
Task |
2.x-dev |
Code |
cmlara |
1 year 5 months |
|
Expand paragonie/constant_time_encoding version constraint to support v3 |
Needs work |
Normal |
Feature request |
8.x-1.x-dev |
Code |
|
11 months 1 week |
|
Disallow viewing recovery codes after first display |
Active |
Major |
Task |
2.x-dev |
Code |
cmlara |
3 years 10 months |
|
Roadmap for 2.0.0 release |
Active |
Normal |
Plan |
2.x-dev |
Miscellaneous |
|
3 years 1 month |