Skip to content

Simplify condition to show OTP or recovery codes

Eduardo Sanz García requested to merge eduardosanz/simplify-condition-2fa into master

What does this MR do and why?

Users with 2FA, either by OTP or WebAuthn, have recovery codes. Here we simplify the condition to show the UI to enter such codes.

Screenshots or screen recordings

Screen_Recording_2023-04-26_at_18.33.25

How to set up and validate locally

  1. Disable all 2FA for the admin user
  2. Enable the webauth_without_totp feature flag
  3. Register a webauthn device
  4. Go to Admin > Settings > General > Sign-in restrictions and select Enable admin mode
  5. Go to https://gdk.test:3443/admin/session/new
  6. Enter password
  7. Selecting Sign in via 2FA code should allow to enter the verification code.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports