Skip to content

fix(two-factor-auth): gate 2FA enforcement on global setting (SER-2911)#7760

Closed
coskunaydinoglu wants to merge 2 commits into
masterfrom
SER-2911-two-factor-auth-respect-global-disable
Closed

fix(two-factor-auth): gate 2FA enforcement on global setting (SER-2911)#7760
coskunaydinoglu wants to merge 2 commits into
masterfrom
SER-2911-two-factor-auth-respect-global-disable

Conversation

@coskunaydinoglu

Copy link
Copy Markdown
Contributor

No description provided.

@coskunaydinoglu coskunaydinoglu force-pushed the SER-2911-two-factor-auth-respect-global-disable branch from b7569ac to 26a04d3 Compare June 22, 2026 09:59
…911)

Toggling the global 2FA setting now updates every member's per-user 2FA
switch instead of only affecting newly created users:

- Enabling 2FA globally turns the switch on for all existing users.
- Disabling 2FA globally turns the switch off for all users and clears
  their stored secret, so users created while it was enabled are no
  longer prompted after it is turned off.

While 2FA is globally disabled, users can still enable/disable it for
their own account; while globally enabled they cannot disable it. The
change reacts only to an actual admin toggle (an initialization guard
avoids touching members on the routine config load at process startup).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V4HJ5qrPiDme1u8XqcjxqF
@coskunaydinoglu coskunaydinoglu force-pushed the SER-2911-two-factor-auth-respect-global-disable branch from 26a04d3 to 12bdea1 Compare June 22, 2026 11:20
auto-merge was automatically disabled June 22, 2026 12:32

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant