en Copyright 2025 Java http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#f04d92b8f19e94b063c4246f59212be0c36ca05c avoid rogue 2fa code generationsWhen a wiki uses rewriting, non-existing files are mapped to doku.phpand interpreted as page names. When using a 2fa provider that transmitscodes (like email) this could lead to sending multiple codes out foreach of these bogus requests. This patch ensures that the 2fa form (andcode sending) is only triggered for document requests as indicated bythe sec-fetch-dest request header. List of files: /plugin/twofactor/Manager.php Tue, 11 Jul 2023 13:03:26 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#c8525a2117e724dfae4ab9910e06d5d95c6ff6ea protect password reset with 2faThis needed some internal changes, because now 2fa data needs to bechecked for a user that is not logged in. Providers may need adjustmentsif they access user data. They should use the getUserData() method ofthe abstract Provider class to do so. List of files: /plugin/twofactor/Manager.php Tue, 11 Jul 2023 10:56:00 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#1c8522cb9ed54182407ffb118486195e8b313a82 changed how provider setup worksThis makes the interface a bit cleaner and less confusing List of files: /plugin/twofactor/Manager.php Tue, 15 Mar 2022 13:32:38 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#5f8f561a23f3113afc6c34a012fc6a75c51435c8 use action to register providers List of files: /plugin/twofactor/Manager.php Wed, 09 Mar 2022 10:03:10 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#4b9cff8a870f8684b87bcaa2b3aecd09387ffb2e manage optouts List of files: /plugin/twofactor/Manager.php Thu, 03 Mar 2022 10:33:45 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#6c996db8dff158c7317a04e1185060c59b19ad7d fix cookie securityThe cookie is now tied to the provider and cookie secret. This way itcan not be constructed without inside knowledge. List of files: /plugin/twofactor/Manager.php Thu, 03 Mar 2022 09:09:30 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#b6119621988e00fd0cbd3059406f4ed18460274b handle user default providers List of files: /plugin/twofactor/Manager.php Thu, 03 Mar 2022 08:30:28 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#a386a536946c52f862186062d92ef1b00c31406b initial login handling List of files: /plugin/twofactor/Manager.php Wed, 02 Mar 2022 13:21:01 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#8b7620a8e0c445f8fa437fe73abebe02c1bc0940 use Manager singleton to check and load providers List of files: /plugin/twofactor/Manager.php Wed, 02 Mar 2022 12:02:25 +0000 Andreas Gohr <andi@splitbrain.org> http://127.0.0.1:8080/history/plugin/twofactor/Manager.php#fca58076a31917642cc917f0d19e4f3f0a82d9e9 first go a profile refactoring List of files: /plugin/twofactor/Manager.php Tue, 15 Feb 2022 16:35:03 +0000 Andreas Gohr <andi@splitbrain.org>