- Log in or register to create an issue
- Advanced search
| Title | Status | Priority | Category | Version | Component | Replies |
Last updated |
Assigned to | Created |
|---|---|---|---|---|---|---|---|---|---|
| TfaLoginContextTrait::canLoginWithoutTfa() uses a "@" placeholder in an href attribute | Fixed | Normal | Bug report | 8.x-1.x-dev | Code | 13 | 3 days 18 hours | 3 months 2 days | |
| Address config schema errors on Drupal 11 | Fixed | Normal | Bug report | 8.x-1.x-dev | Code | 10 | 3 days 18 hours | 8 months 2 weeks | |
| Every intermediate step of full setup announces "TFA setup complete" | Active | Normal | Bug report | 8.x-1.x-dev | Code | 2 | 3 days 18 hours | 3 weeks 1 day | |
| Full Setup not working on 8.x-1.12 | Fixed | Critical | Bug report | 8.x-1.x-dev | Code | 26 | 1 week 1 day | 2 years 3 months | |
| Clarify supported status with REST module | Active | Normal | Support request | 8.x-1.x-dev | Documentation | 1 | 2 weeks 1 day | 2 weeks 1 day | |
| Logs for failed TFA attempts | Needs work | Normal | Feature request | 2.x-dev | Code | 6 | 2 weeks 3 days | 1 month 2 weeks | |
| Expand 2.x technical documentation with pre-production audit and enforcement architecture guides | Needs review | Normal | Feature request | 2.x-dev | Documentation | 5 | 2 weeks 4 days | 2 weeks 4 days | |
| Destination is lost on login when TFA is not required | Needs work | Normal | Bug report | 8.x-1.x-dev | Code | 5 | 2 weeks 6 days | 1 month 6 days | |
| Support Encrypt 4.x | Postponed | Normal | Task | 8.x-1.x-dev | Code | 2 | 2 weeks 6 days | 2 weeks 6 days | |
| Tugboat previews | Needs work | Normal | Feature request | 2.x-dev | Code | 12 | 3 weeks 3 days | 1 year 6 months | |
| HTTP Basic provider ignore may be using wrong provider id | Active | Normal | Bug report | 2.x-dev | Code | 2 | 4 weeks 1 hour | 4 weeks 1 hour | |
| Use MemoryCacheInterface for cache.tfa_memache | Active | Normal | Task | 2.x-dev | Code | 1 | 4 weeks 2 hours | 4 weeks 2 hours | |
| Force user to setup TFA when required and there are no remaining skips | Needs work | Normal | Feature request | 2.x-dev | Code | 50 | 1 month 1 week | 5 years 2 months | |
| Enable administrators to override the default TOTP label | Active | Normal | Feature request | 2.x-dev | Code | 1 | 1 month 1 week | 1 month 1 week | |
| Create .mailmap file to correct commiter attribution | Active | Normal | Task | 2.x-dev | Miscellaneous | 2 | 1 month 1 week | 1 month 1 week | |
| "Skip and finish" cancels the whole setup instead of skipping the step and finishing | Postponed | Normal | Bug report | 8.x-1.x-dev | Code | 7 | 1 month 3 weeks | 2 months 1 week | |
| Full setup records only the last step: validation plugin (e.g. tfa_totp) missing from enabled plugins in tfa_user_settings | Postponed | Normal | Bug report | 8.x-1.x-dev | Code | 4 | 1 month 3 weeks | 2 months 5 days | |
| Full setup completion fires on every step: duplicate "setup complete" message and duplicate notification email | Postponed | Normal | Bug report | 8.x-1.x-dev | Code | 4 | 1 month 3 weeks | 2 months 5 days | |
| Automated Drupal 12 compatibility fixes for tfa 2.x-dev | Needs review | Normal | Task | 2.x-dev | Code | 5 | 2 months 2 weeks | 3 months 1 week | |
| "Redirect users on login to TFA Setup Page" not working | Needs review | Normal | Bug report | 8.x-1.12 | Code | 5 | 3 months 1 day | 3 months 3 days | |
| TfaLoginForm sets the cache max age to zero | Active | Normal | Task | 8.x-1.x-dev | Code | 2 | 3 months 1 day | 3 months 2 days | |
| Support chillerlan/php-qrcode 5.x and 6.x | Active | Normal | Task | 2.x-dev | Code | 6 | 4 months 2 days | 1 year 3 months | |
| Gracefully handle EncryptionServiceInterface Exceptions | Active | Normal | Bug report | 2.x-dev | Code | 8 | 4 months 1 week | 3 years 8 months | |
| Error "The selected key size does not match the actual size of the key" when setting up key according to README | Active | Normal | Bug report | 8.x-1.x-dev | Documentation | 4 | 4 months 2 weeks | 4 months 2 weeks | |
| One setup step remaining, two QR Code Scans required | Needs work | Normal | Bug report | 8.x-1.x-dev | User interface | 21 | 4 months 3 weeks | 1 year 11 months | |
| TFA password reset flow fatals when one-time login link does not resolve to a valid user | Needs review | Normal | Bug report | 8.x-1.x-dev | Code | 6 | 4 months 3 weeks | 4 months 3 weeks | |
| Make the helplinks list a configuration option | Active | Normal | Feature request | 2.x-dev | Code | 5 | 5 months 1 week | 5 months 2 weeks | |
| TFA not working since update to Core 10.6.5 and 10.6.6 | Postponed (maintainer needs more info) | Critical | Bug report | 8.x-1.12 | Code | 3 | 5 months 2 weeks | 5 months 2 weeks | |
| enable a plugin by default for new users | Active | Normal | Support request | 8.x-1.12 | Code | 7 | 6 months 4 weeks | 7 months 2 weeks | |
| Add configurable post-setup redirect path (tokens, aliases, <front>) | Needs work | Normal | Feature request | 2.x-dev | User interface | 4 | 7 months 5 days | 10 months 4 weeks | |
| The "tfa_trusted_browser" plugin does not exist. | Needs work | Normal | Bug report | 8.x-1.x-dev | Code | 20 | 7 months 1 week | 2 years 6 months | |
| Remember validation plugin for next login when multiple validation plugins are enabled. | Active | Normal | Feature request | 2.x-dev | User interface | 3 | 7 months 2 weeks | 3 years 10 hours | |
| tfa-reset-user drush command broken by docblock documentation | Active | Normal | Bug report | 2.x-dev | Code | 3 | 7 months 3 weeks | 7 months 3 weeks | |
| Fix CI failures: resolve PHPUnit + PHPStan errors | Needs review | Normal | Bug report | 8.x-1.x-dev | Code | 12 | 7 months 3 weeks | 7 months 3 weeks | |
| Don't send notification emails when enabling login plugin | Needs review | Normal | Bug report | 8.x-1.x-dev | Code | 6 | 8 months 1 hour | 2 years 7 months | |
| Only show default plugin when TFA disabled and hide skip validation attempts if disabled | Needs work | Normal | Feature request | 2.x-dev | Code | 15 | 8 months 2 weeks | 1 year 12 months | |
| Use #config_target for the settings form | Needs work | Normal | Task | 2.x-dev | Code | 7 | 9 months 2 weeks | 1 year 9 months | |
| plugin_label missing in feedback when TFA setup is canceled | Needs review | Normal | Bug report | 8.x-1.9 | Code | 17 | 9 months 3 weeks | 1 year 11 months | |
| Secret length not accepted by FreeOTP | Active | Normal | Feature request | 8.x-1.12 | Code | 4 | 9 months 3 weeks | 9 months 3 weeks | |
| Suggestion to only show validation skip status when relevant | Needs work | Normal | Feature request | 2.x-dev | User interface | 7 | 10 months 1 week | 5 years 10 months | |
| Visual audit of code execution flows | Active | Normal | Task | 2.x-dev | Code | 6 | 10 months 1 week | 1 year 3 days | |
| Public followup for SA-CONTRIB-2025-023 | Needs review | Normal | Task | 2.x-dev | Code | 9 | 10 months 2 weeks | cmlara | 1 year 6 months |
| Expand paragonie/constant_time_encoding version constraint to support v3 | Needs work | Normal | Feature request | 8.x-1.x-dev | Code | 7 | 11 months 2 weeks | 11 months 2 weeks | |
| Disallow viewing recovery codes after first display | Active | Major | Task | 2.x-dev | Code | 10 | 1 year 2 days | cmlara | 3 years 10 months |
| Roadmap for 2.0.0 release | Active | Normal | Plan | 2.x-dev | Miscellaneous | 16 | 1 year 3 days | 3 years 2 months | |
| Invalid session on multi container app | Active | Normal | Support request | 8.x-1.x-dev | Code | 3 | 1 year 1 month | 1 year 1 month | |
| [July 16th] Public follow-up to SA-CONTRIB-2025-085 | Patch (to be ported) | Normal | Task | 2.x-dev | Code | 4 | 1 year 2 months | 1 year 2 months | |
| Fix reliability of storing status in user data | Needs work | Normal | Task | 2.x-dev | Code | 7 | 1 year 2 months | 1 year 2 months | |
| Dispatch events when user TFA status has changed | Postponed | Normal | Feature request | 2.x-dev | Code | 21 | 1 year 2 months | 1 year 2 months | |
| Support for phpunit 11 | Needs work | Normal | Task | 2.x-dev | Code | 7 | 1 year 2 months | 1 year 2 months |
Pages
Subscribe with RSS 