fix wrong logical check

Allow token based logins without 2fa for automated access

By default token auth accesses to the API are now always allowed without
2fa. If you need automated access to other endpoints (like a script

Allow token based logins without 2fa for automated access

By default token auth accesses to the API are now always allowed without
2fa. If you need automated access to other endpoints (like a script
provided by a plugin) an option enables that.

show more ...

allow to skip 2fa for trusted IP addresses

protect password reset with 2fa

This needed some internal changes, because now 2fa data needs to be
checked for a user that is not logged in. Providers may need adjustments
if they access user data.

protect password reset with 2fa

This needed some internal changes, because now 2fa data needs to be
checked for a user that is not logged in. Providers may need adjustments
if they access user data. They should use the getUserData() method of
the abstract Provider class to do so.

show more ...

Add "useinternaluid" option

Properly handle optional 2fa

Having twofactor enabled but no configured providers broke
authentication in some cases

Fixes #1

reuse sticky property from main cookie

When a user wants to stay logged in, the two factor auth is saved for 3
months (main login is saved for a year)

added custom OTP form field

This also fixes wilminator/dokuwiki-plugin-twofactor#26

style adjustment

make 2fa login more recognizable

changed how provider setup works

This makes the interface a bit cleaner and less confusing

some cleanup and streamlining for providers

fix handling of multiple providers

disable the user temporarily in all non-main screens

This requires the new DOKUWIKI_INIT_DONE event introduced in
splitbrain/dokuwiki#3640

delete cookie on logout

use action to register providers

fix user checking in preprocess

profile localization and styling

manage optouts

show proper links for alternative providers

fix cookie security

The cookie is now tied to the provider and cookie secret. This way it
can not be constructed without inside knowledge.

Removed old code

The basic mechanisms have been reimplemented, so the old code has been
removed.

handle user default providers

remember 2fa authentications

initial login handling