Skip to content

[C2] Improvements to 2FA #6162

Open
@ywarnier

Description

@ywarnier
  • The 2FA authentication should send the name of the site (as in the "E-learning portal name" setting in Chamilo, because currently we only send the e-mail address and that doesn't allow someone to remember what service it was for. It should be something like 'Test portal: [email protected]' instead of just '[email protected]'.
  • When you setup 2FA, you normally have to confirm the 2FA activation by entering directly the code you get in your 2FA application. You scan the QR code and immediately give the code that appears, and then your 2FA is enabled.
  • When I login and if the code was wrong, I expect a message telling me so, and in my tests I just get a login form refresh but nothing tells me what was wrong.
  • To disable 2FA or change your password, you have to enter your 2FA code (not just to login).

Originally posted by @ywarnier in #5836 (comment)

Metadata

Metadata

Assignees

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions