Ajax/Headless 2FA

[jan-thoma]

Having the possibility to use 2FA on the frontend is really great. I would love to see the possibility to setup and verify 2FA via controller actions. I would propose change the /actions/users/login action to reflect if the user needs to setup 2FA if it's not setup or to enter the current OTP if it's already setup and the user attempts to login. Furthermore an option would be needed to setup 2FA when it's not explicitly set on the user group.