Skip to content

Allow for resetting 2FA by user / admins - #5128

Open
kristiankunc wants to merge 10 commits into
mainfrom
2fa-recovery
Open

Allow for resetting 2FA by user / admins#5128
kristiankunc wants to merge 10 commits into
mainfrom
2fa-recovery

Conversation

@kristiankunc

@kristiankunc kristiankunc commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

Add 2FA recovery/reset options.

  • Admin reset action on the account page: requires a reason, writes a security note,
    emails the member. Gated by account.remove-password.*
  • Self-service "Replace Authenticator App" on the 2FA page, visible to mandatory-2FA
    staff, behind password.confirm
  • Members emailed when a recovery code is used to sign in
image

@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

🔍 OpenCodeReview found 10 issue(s) in this PR.

  • ✅ Successfully posted inline: 10 comment(s)

Comment thread app/Filament/Admin/Resources/Accounts/Pages/ViewAccount.php
Comment thread tests/Feature/Admin/Account/Pages/ViewAccountPageTest.php
@github-actions github-actions Bot removed the review label Aug 19, 2026
@kristiankunc
kristiankunc marked this pull request as draft August 19, 2026 14:10
@kristiankunc
kristiankunc requested review from AxonC and CLC0609 August 20, 2026 14:18
@kristiankunc
kristiankunc marked this pull request as ready for review August 20, 2026 14:29
Comment thread app/Filament/Admin/Resources/Accounts/Pages/ViewAccount.php Outdated
Comment thread app/Http/Responses/Auth/TwoFactorLoginResponse.php Outdated
Comment thread app/Notifications/Mship/RecoveryCodeUsed.php
Comment thread tests/Feature/Account/Auth/TwoFactorAuthTest.php
Comment thread tests/Feature/Admin/Account/Pages/ViewAccountPageTest.php
Comment thread tests/Feature/Admin/Account/Pages/ViewAccountPageTest.php
Comment thread tests/Unit/Account/SecurityNoteTypeTest.php
Comment thread tests/Unit/Account/TwoFactorResetNotificationTest.php
Comment thread tests/Unit/Account/TwoFactorResetNotificationTest.php
Comment thread tests/Unit/Account/TwoFactorResetPerformedNotificationTest.php
@github-actions github-actions Bot removed the review label Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant