Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
- Log in or register to create an issue
- Advanced search
Title | Status | Priority | Category | Version | Component | Replies | Last updated | Assigned to | Created |
---|---|---|---|---|---|---|---|---|---|
PHP 8.0 compatibility | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 9 | 4 months 2 weeks | 1 year 6 months | |
Risk of access bypass through replay attacks | Needs review | Normal | Bug report | 7.x-1.x-dev | Code | 3 | 5 months 4 days | 5 months 4 days | |
tfa_user_settings not updated when enabeling new plugin | Active | Normal | Bug report | 7.x-1.2 | Code | 1 | 6 months 2 weeks | 6 months 2 weeks | |
Cannot enter second factor when Drupal in offline mode | Closed (won't fix) | Normal | Bug report | 7.x-1.x-dev | User interface | 8 | 6 months 3 weeks | 6 years 11 months | |
testTotpReplay test failure | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 8 months 2 days | 8 months 2 weeks | |
Deleting any Trusted Browser deletes all | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 8 months 2 days | 2 years 9 months | |
"TFA setup canceled." string not translatable | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 8 months 2 days | 2 years 6 months | |
Outdated link and info for Authenticator | Closed (fixed) | Normal | Bug report | 7.x-1.1 | Code | 5 | 8 months 2 days | 3 years 2 weeks | |
#states property needs to include tfa_enabled as well as plugin settings | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 8 | 8 months 2 days | 6 years 9 months | |
Function each() is deprecated since PHP 7.2 | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 8 | 8 months 2 days | 4 years 8 months | |
Plugin setup pages are accessible regardless of their status | Needs work | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 8 months 2 weeks | 8 years 3 months | |
With Twilio SMS, first time login of users with required role and mobile number throws error. | Postponed (maintainer needs more info) | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 8 months 2 weeks | 7 years 6 months | |
Hyphen terminating token confuses translator. | Postponed (maintainer needs more info) | Normal | Bug report | 7.x-1.x-dev | User interface | 3 | 8 months 2 weeks | 7 years 2 months | |
Combination of options results in strange behavior | Active | Normal | Bug report | 7.x-1.x-dev | Code | 1 | 2 years 6 months | 2 years 6 months | |
After Server Restart. Users with roles that required TFA are not able to login. | Active | Major | Bug report | 7.x-1.1 | Code | 1 | 3 years 1 month | 3 years 1 month | |
Replace mcrypt (deprecated) with openssl | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 11 | 3 years 6 months | 6 years 5 months | |
TFA Setup reporting "incorrect password" for AD accounts | Active | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 4 years 6 months | 7 years 9 months | |
Custom login block not using TFA? | Active | Normal | Bug report | 7.x-1.1 | Miscellaneous | 1 | 4 years 6 months | 4 years 6 months | |
Enable TFA requires TFA even if no roles required | Active | Major | Bug report | 7.x-1.x-dev | User interface | 3 | 4 years 9 months | 6 years 9 months | |
Account that opted in for TFA should be considered "tfa required" | Needs review | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 4 years 9 months | 5 years 9 months | |
Multidomain trusted browser cookies | Needs review | Normal | Bug report | 7.x-1.x-dev | Code | 3 | 4 years 9 months | 4 years 9 months | |
SMS TFA pretends to be ready when it is not | Closed (fixed) | Critical | Bug report | 7.x-1.x-dev | Code | 11 | 5 years 6 months | 8 years 4 months | |
Document that there is no support for Twilio 5 PHP library | Needs review | Normal | Bug report | 7.x-1.x-dev | Documentation | 18 | 5 years 6 months | 7 years 3 months | |
array_rand not desirable, update to latest GoogleAuthenticator.php | Closed (fixed) | Major | Bug report | 7.x-1.0-beta2 | Code | 16 | 7 years 4 months | 8 years 2 weeks | |
Link for Authy goes to a 404 | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 7 | 7 years 4 months | 7 years 10 months | |
Update error message about unavailable phone number field | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | User interface | 8 | 7 years 4 months | 8 years 3 months | |
Be sure to check leading zeros | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 9 | 7 years 5 months | 8 years 5 months | |
Disabling for an account does not seem to completely disable | Closed (works as designed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 8 years 3 months | 8 years 4 months | |
using a recovery code doesn't let the user give a name to the browser | Closed (won't fix) | Normal | Bug report | 7.x-1.x-dev | User interface | 3 | 8 years 3 months | 8 years 11 months | |
Undefined indexes "account in tfa_form_validate(" and "code in TfaTotp->validateForm" | Closed (cannot reproduce) | Normal | Bug report | 7.x-1.x-dev | Code | 11 | 8 years 3 months | 9 years 7 months | |
validate/format hooks and alterable data issues | Closed (duplicate) | Normal | Bug report | 7.x-1.0-beta2 | Code | 2 | 8 years 3 months | 8 years 9 months | |
Code for auth app is not able to copy | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | User interface | 1 | 8 years 8 months | 8 years 8 months | |
Rename tfa_basic_trusted_device to tfa_basic_trusted_browser | Closed (fixed) | Major | Bug report | 7.x-1.x-dev | Code | 11 | 8 years 10 months | 8 years 11 months | |
PHP notices when no fallback setup | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 8 years 10 months | 8 years 11 months | |
Remove spaces from TOTP code | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 8 years 10 months | 9 years 1 week | |
Admins can't disable TFA for other users | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 7 | 8 years 10 months | 8 years 11 months | |
TFA disable warning always applies to UID 1 | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 2 | 8 years 11 months | 9 years 6 months | |
Setup TFA for account - Not working | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 7 | 8 years 11 months | 9 years 7 months | |
Disable TFA Confirmation Email Fails | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 9 years 2 weeks | 9 years 1 month | |
Use better random source | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 9 years 4 months | 9 years 6 months | |
Setting trusted browser always goes to recovery codes | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 1 | 9 years 7 months | 9 years 7 months | |
Cannot remove existing trusted browser when adding new | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 1 | 9 years 7 months | 9 years 7 months | |
Trusted browsers last used "never" | Closed (duplicate) | Normal | Bug report | 7.x-1.x-dev | Code | 2 | 9 years 7 months | 9 years 7 months | |
Don't provide browser trust setup option if plugin isn't enabled | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 9 years 9 months | 9 years 10 months | |
Detection of cookie domain adds http:// | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 9 years 9 months | 9 years 11 months | |
Warn if removing totp and tfa is required, removing doesn't actually remove | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 5 | 9 years 9 months | 9 years 11 months | |
Call to undefined function dpm() | Closed (fixed) | Normal | Bug report | 7.x-1.x-dev | Code | 3 | 9 years 11 months | 9 years 11 months |