Problem/Motivation

As a site administrator, there is no easy way to determine who has and has not enabled TFA.

Proposed resolution

Provide TFA enabled status via views.

CommentFileSizeAuthor
#2 2958950-2.patch2.87 KBmarkdorison
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

markdorison created an issue. See original summary.

markdorison’s picture

markdorison
he/him
CreditAttribution: markdorison at Chromatic commented
Status: Active » Needs review
FileSize
2958950-2.patch2.87 KB
daggerhart’s picture

daggerhart CreditAttribution: daggerhart at Hook 42 commented
Status: Needs review » Reviewed & tested by the community

Looks good to me. Tested locally and seems to work well. Thanks!

Going to RTBC this and will get it merged in.

daggerhart’s picture

daggerhart CreditAttribution: daggerhart commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

msypes’s picture

msypes CreditAttribution: msypes commented

I don't think this does what it says, or else "enabled" means something entirely different than I expect. The value changes from "No" to "Yes" as soon a user who is required to set up TFA logs in, not because the user has actually "enabled" TFA on his/her account.

It seems to me that the test for whether a user has actually enabled TFA is discernible from whetheruserData->get('tfa', $uid, 'tfa_user_settings')['data']['plugins'] is empty (not enabled) or includes a key=>value pair for a plugin (enabled).