Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.- Log in or register to create an issue
- Advanced search
| Title | Status | Priority | Category | Version | Component | Replies |
Last updated |
Assigned to | Created |
|---|---|---|---|---|---|---|---|---|---|
| Encrypt error with php 8.1 | Postponed (maintainer needs more info) | Normal | Bug report | 8.x-1.x-dev | Code | 8 | 5 days 23 hours | 4 months 1 week | |
| Creation of dynamic property TfaTestCase::$web_user is deprecated | Closed (fixed) | Normal | Bug report | 7.x-2.x-dev | Code | 6 | 1 week 6 days | 3 weeks 6 days | |
| The "tfa_trusted_browser" plugin does not exist. | Needs work | Normal | Bug report | 8.x-1.5 | Code | 13 | 3 weeks 1 day | 1 month 5 days | |
| 2.x-dev incompatible with other modules calling user_login_finalize() | Needs review | Normal | Bug report | 2.x-dev | Code | 8 | 3 weeks 2 days | 1 month 2 weeks | |
| Views "TFA status" field wrong output | Active | Normal | Bug report | 2.x-dev | Code | 3 | 3 weeks 5 days | 1 month 1 day | |
| Installing contrib modules can lead to TFA accidently being bypassed | Closed (fixed) | Critical | Bug report | 2.x-dev | Code | 11 | 1 month 2 weeks | 4 months 5 days | |
| The "skip step"/"skip and finish" button UX is confusing because the error "TFA setup canceled" is then shown when clicked | Postponed (maintainer needs more info) | Minor | Bug report | 8.x-1.x-dev | User interface | 4 | 1 month 2 weeks | 1 month 2 weeks | |
| Two factor authentication security code input is not focused | Active | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 1 month 2 weeks | 1 month 2 weeks | |
| Don't send notification emails when enabling trusted browser | Needs work | Normal | Bug report | 8.x-1.5 | Code | 3 | 1 month 3 weeks | 1 month 4 weeks | |
| Creation of dynamic property Drupal\tfa\Plugin\Tfa\TfaTotp::$isValid is deprecated | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 13 | 2 months 5 days | 10 months 1 day | |
| tfa.cache.memcache is not using memory cache backend | Closed (fixed) | Critical | Bug report | 2.x-dev | Code | 6 | 2 months 1 week | 3 months 20 hours | |
| Resolve SA-CONTRIB-2024-003 in 2.x branch | Active | Critical | Bug report | 2.x-dev | Code | 3 | 2 months 2 weeks | 3 months 1 day | |
| validateRequest() does not convert integers to zero padded strings before calling validate() | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 9 | 3 months 2 days | 3 months 3 weeks | |
| "validation skipped" value keeps incrementing, locks out users | Closed (outdated) | Normal | Bug report | 2.0.0-alpha2 | Code | 4 | 3 months 6 days | 5 months 1 week | |
| Import 8.x-1.4 security fix into 2.x | Closed (fixed) | Major | Bug report | 2.x-dev | Code | 5 | 3 months 1 week | 4 months 3 weeks | |
| user.data service returns strings not integers | Closed (fixed) | Critical | Bug report | 2.x-dev | Code | 5 | 3 months 1 week | 4 months 10 hours | |
| TFA switches to dev branch | Closed (cannot reproduce) | Normal | Bug report | 8.x-1.4 | Miscellaneous | 13 | 3 months 2 weeks | 3 months 3 weeks | |
| Wrong domain name for Google Authenticator on TOTP and HOTP setup page | Closed (duplicate) | Major | Bug report | 2.x-dev | Miscellaneous | 6 | 4 months 2 weeks | 6 months 1 week | |
| Trusted browser message when set to 1 day is "1 days" plural | Closed (fixed) | Minor | Bug report | 2.0.0-alpha2 | Code | 13 | 4 months 2 weeks | 1 year 3 months | |
| storeAcceptedCode()/alreadyAcceptedCode should check token id. | Active | Normal | Bug report | 2.x-dev | Code | 2 | 5 months 1 day | 5 months 1 day | |
| Cleanup accepted codes stored in user data | Needs work | Minor | Bug report | 2.x-dev | Code | 9 | 5 months 1 day | 3 years 2 days | |
| Allow TFA bypass during password reset by default for super admin (uid1) | Closed (works as designed) | Major | Bug report | 8.x-1.x-dev | Code | 19 | 5 months 1 week | 5 months 4 weeks | |
| Cleanup TfaTrustedBrowser Plugin save logic | Closed (fixed) | Critical | Bug report | 2.x-dev | Code | 15 | 5 months 1 week | 6 months 1 week | |
| Maintenance mode blocks TOTP TFA entry | Closed (fixed) | Major | Bug report | 7.x-2.x-dev | Code | 10 | 5 months 2 weeks | 8 years 1 month | |
| Authenticator links clean up | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 19 | 5 months 2 weeks | 7 months 2 weeks | |
| TFA disable screen cancel button always redirects to current user TFA page | Closed (duplicate) | Normal | Bug report | 8.x-1.2 | Code | 5 | 5 months 3 weeks | 6 months 1 day | |
| Unable to Disable TFA for a user. | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 14 | 5 months 3 weeks | 6 months 2 weeks | |
| Google Authenticator Link is not working | Closed (duplicate) | Normal | Bug report | 8.x-1.3 | Code | 2 | 5 months 3 weeks | 5 months 3 weeks | |
| TFA prevents Devel switch user | Closed (works as designed) | Normal | Bug report | 7.x-2.x-dev | Code | 6 | 5 months 3 weeks | 4 years 11 months | |
| Check if Help module is enabled | Needs work | Normal | Bug report | 7.x-2.x-dev | User interface | 4 | 5 months 4 weeks | 8 years 3 months | |
| Self-service password reset not working when tfa is enabled | Postponed (maintainer needs more info) | Normal | Bug report | 7.x-2.x-dev | Code | 13 | 5 months 4 weeks | 5 years 1 month | |
| TfaTotp: Google Authenticator link no longer valid | Closed (duplicate) | Normal | Bug report | 2.0.0-alpha2 | Code | 2 | 6 months 2 days | 6 months 2 days | |
| Fix the issue reported by PHPCS | Closed (works as designed) | Normal | Bug report | 2.x-dev | Code | 6 | 6 months 2 weeks | 6 months 2 weeks | |
| Issuer field not configured | Needs work | Normal | Bug report | 8.x-1.2 | Code | 4 | 6 months 3 weeks | 6 months 3 weeks | |
| TfaLoginController enforces opaque form expiration | Active | Normal | Bug report | 2.x-dev | Code | 2 | 7 months 18 hours | 7 months 1 day | |
| Error when trying to send email | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 9 | 7 months 4 days | 1 year 1 month | |
| Give more accurate feedback when canceling a plugin setup | Closed (fixed) | Minor | Bug report | 8.x-1.x-dev | Code | 11 | 7 months 4 days | 6 years 4 months | |
| Operation link should be checked by current user. | Closed (fixed) | Normal | Bug report | 2.x-dev | Code | 8 | 7 months 1 week | 11 months 2 weeks | |
| TfaPasswordResetTest does not directly test TFA prompts. | Active | Normal | Bug report | 8.x-1.x-dev | Code | 1 | 7 months 1 week | 7 months 1 week | |
| Incorrect plugin id check breaks plugins | Closed (fixed) | Major | Bug report | 8.x-1.x-dev | Code | 14 | 7 months 1 week | 1 year 3 months | |
| Cancel on disable form for other user redirects to the current user TFA overview | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 7 | 7 months 2 weeks | 10 months 4 weeks | |
| The checkbox for trusted browser on the tfa page always exists. | Closed (cannot reproduce) | Normal | Bug report | 2.0.0-alpha2 | Code | 3 | 7 months 3 weeks | 9 months 6 days | |
| 'TFA enabled' Views field sorts incorrectly when using tablesorting | Active | Minor | Bug report | 2.x-dev | Code | 2 | 8 months 14 hours | 4 years 6 months | |
| Typehint for TfaBasePlugin $alreadyAccepted should be bool | Closed (fixed) | Minor | Bug report | 8.x-1.x-dev | Code | 7 | 8 months 1 week | 1 year 3 weeks | |
| Show correct label for confirm password | Closed (fixed) | Minor | Bug report | 8.x-1.x-dev | Code | 6 | 8 months 1 week | 10 months 3 days | |
| Gracefully handle EncryptionServiceInterface Exceptions | Active | Normal | Bug report | 2.x-dev | Code | 6 | 8 months 1 week | 1 year 3 months | |
| TFA enabled config not set on user profile | Active | Normal | Bug report | 2.x-dev | Code | 12 | 8 months 2 weeks | 10 months 1 week | |
| TFA is asking for verification only on admin not on authenticated user - but neither is enabled. | Closed (duplicate) | Major | Bug report | 8.x-1.x-dev | Code | 7 | 9 months 2 weeks | 1 year 10 months | |
| Cacheable metadata issue | Active | Minor | Bug report | 2.x-dev | Code | 3 | 9 months 2 weeks | 1 year 4 months | |
| User login via route user.login.http bypasses TFA | Closed (outdated) | Critical | Bug report | 2.x-dev | Code | 5 | 9 months 2 weeks | 1 year 5 months |
Pages
Subscribe with RSS 
