Merge pull request #192 from humhub/enh/ignore-2fa

Disable 2FA for Rest

Author: luke-

Module.php

@@ -11,6 +11,7 @@
 use humhub\components\bootstrap\ModuleAutoLoader;
 use humhub\components\Module as BaseModule;
 use Yii;
+use yii\base\Event;
 use yii\helpers\Url;
 
 class Module extends BaseModule
@@ -107,4 +108,13 @@ public function isActiveModule($moduleId)
 
         return !isset($apiModules[$moduleId]) || $apiModules[$moduleId];
     }
+
+    public function beforeAction($action)
+    {
+        Yii::$app->on('twofa.beforeCheck', function (Event $event) use ($action) {
+            $event->handled = $action->controller->id !== 'admin-user';
+        });
+
+        return parent::beforeAction($action);
+    }
 }

docs/CHANGELOG.md

@@ -1,8 +1,9 @@
 Changelog
 =========
 
-0.10.6 (Unreleased)
-----------------------
+0.10.6 (April 17, 2025)
+-----------------------
+- Enh #192: Ignore all actions from 2FA check
 - Fix #194: Fix failing tests
 
 0.10.5 (March 3, 2025)