Code

Full RFC6238 Compatibility#207

Code

Closed

ericmann wants to merge 175 commits intoWordPress:masterWordPress/two-factor:masterfrom ericmann:totp-parityericmann/two-factor:totp-parityCopy head branch name to clipboard

+22,184-13,321

Commits

Commits on Feb 8, 2023

• Tests: Delete redundant test, add missing one.

  Show description for 695a61a
  iandunn

  committed
  695a61a

• Tests: Ignore view/controller code with minimal coverage value

  iandunn

  committed
  0d61135

Commits on Feb 10, 2023

• Backup Codes: Always generate 10 codes via REST.

  Show description for 88634af
  iandunn

  committed
  88634af

• Tests: Add provider @group attributes for convenience.

  iandunn

  committed
  5d91ba6

Commits on Feb 13, 2023

• Add rate limiting to two factor attempts. (WordPress#510)

  Show description for 4c9607b
  dd32

  authored
  4c9607b

• TOTP: Enforce single-use of TOTP one-time passwords. (WordPress#517)

  Show description for 249e50d
  

  dd32

  and

  iandunn

  authored
  249e50d

Commits on Feb 14, 2023

• Tests: Test for missing user/token more precisely.

  Show description for f7e42d6
  iandunn

  committed
  f7e42d6

Commits on Feb 15, 2023

• Include whitespace between the leading text and the code input. (WordPress#519)

  Show description for 2991f4c
  dd32

  authored
  2991f4c

• Composer: Install WordPress 6.1.1, always use the latest 6.x version of WordPress, update other dependencies. (WordPress#524)

  dd32

  authored
  f845b1a

Commits on Feb 17, 2023

• Add unit tests for Two_Factor_Provider::get_code(). (WordPress#522)

  Show description for 4bfb2ec
  

  dd32

  and

  iandunn

  authored
  4bfb2ec

Commits on Feb 21, 2023

• Tests: Generate an HTML coverage report when running tests locally.

  Show description for 8df5940
  iandunn

  committed
  8df5940

Commits on Feb 24, 2023

• Core: Reset compromised passwords after 2FA failures (WordPress#482)

  Show description for 1833492
  iandunn

  authored
  1833492

Commits on Feb 27, 2023

• Add a TOTP Issuer filter, Document the other TOTP Filters (WordPress#530)

  Show description for 26ee898
  dd32

  authored
  26ee898

Commits on Feb 28, 2023

• Support login-by-email in maybe_show_reset_password_notice(). (WordPress#532)

  dd32

  authored
  5ef4cca

Commits on Mar 2, 2023

• Switch to using $_REQUEST directly instead of filter_input() and remove backup_2fa (WordPress#527)

  Show description for 917f67a
  dd32

  authored
  917f67a

Commits on Mar 3, 2023

• Be more tolerant of user input for auth codes (WordPress#518)

  Show description for 5d72721
  dd32

  authored
  5d72721

Commits on Mar 6, 2023

• Bump loader-utils from 2.0.2 to 2.0.4 (WordPress#496)

  Show description for eb8567e
  dependabot[bot]

  authored
  eb8567e

• Bump json5 from 1.0.1 to 1.0.2 (WordPress#506)

  Show description for e1efa02
  dependabot[bot]

  authored
  e1efa02

• Bump simple-git from 3.14.1 to 3.16.0 (WordPress#508)

  Show description for 91bf00f
  dependabot[bot]

  authored
  91bf00f

• Bump http-cache-semantics from 4.1.0 to 4.1.1 (WordPress#512)

  Show description for 4fa4e61
  dependabot[bot]

  authored
  4fa4e61

• Bump @sideway/formula from 3.0.0 to 3.0.1 (WordPress#513)

  Show description for f93410a
  dependabot[bot]

  authored
  f93410a

Commits on Mar 15, 2023

• Bump webpack from 5.74.0 to 5.76.1

  Show description for aa0da13
  dependabot[bot]

  authored
  aa0da13

• Create 1-bug-report.yml

  jeffpaul

  committed
  a93ca39

• Create 2-enhancement.yml

  jeffpaul

  committed
  3ebfb78

• Create config.yml

  jeffpaul

  committed
  5e5233a

• Create PULL_REQUEST_TEMPLATE.md

  jeffpaul

  committed
  52663b1

Commits on Mar 16, 2023

• Standardise on int|WP_User input to the "for user" functions (WordPress#535)

  Show description for 3db2103
  

  dd32

  and

  iandunn

  authored
  3db2103

• Merge pull request WordPress#539 from WordPress/add/repo-templates

  Show description for aeaf23f
  jeffpaul

  authored
  aeaf23f

• Add information about where to submit security bugs.

  felixarntz

  committed
  53c8046

• Merge pull request WordPress#541 from felixarntz/add/faq-security-pointer

  Show description for c0eae28
  peterwilsoncc

  authored
  c0eae28

Commits on Mar 20, 2023

• version bump to 0.8.0

  jeffpaul

  committed
  9294b1e

• Update .distignore

  jeffpaul

  committed
  e4f0c14

• Update deploy.yml

  jeffpaul

  committed
  a9b5492

Commits on Mar 22, 2023

• Merge pull request WordPress#538 from WordPress/dependabot/npm_and_yarn/webpack-5.76.1

  Show description for 3d350ae
  kasparsd

  authored
  3d350ae

• Merge branch 'master' into release/0.8.0

  kasparsd

  authored
  959b069

• Update .github/workflows/deploy.yml

  Show description for 75dffb6
  

  jeffpaul

  and

  dd32

  authored
  75dffb6

• Update .github/workflows/deploy.yml

  Show description for 3801b5d
  

  jeffpaul

  and

  dd32

  authored
  3801b5d

Commits on Mar 24, 2023

• Merge pull request WordPress#543 from WordPress/update/deploy-action

  Show description for 48ce9e4
  kasparsd

  authored
  48ce9e4

• Merge branch 'master' into release/0.8.0

  kasparsd

  authored
  994d139

Commits on Mar 27, 2023

• Merge pull request WordPress#542 from WordPress/release/0.8.0

  Show description for 2fa64f6
  kasparsd

  authored
  2fa64f6

• Remove unnecessary comma to fix fatal error on PHP 7.2 (WordPress#547)

  Show description for 7d0ffeb
  

  KZeni

  and

  iandunn

  authored
  7d0ffeb

• Release 0.8.1 (WordPress#550)

  iandunn

  authored
  8f73d27

Commits on Mar 29, 2023

• Fix typo

  pkevan

  authored
  9e11875

• Merge pull request WordPress#551 from pkevan/patch-2

  Show description for fd9a058
  kasparsd

  authored
  fd9a058

Commits on Apr 12, 2023

• Allow filtering the PHP classname used for a provider (WordPress#546)

  Show description for c490519
  dd32

  authored
  c490519

• Bump tested up to version (WordPress#552)

  av3nger

  authored
  ed75664

Commits on Apr 19, 2023

• Store the two-factor details in the user session at login time (WordPress#528)

  Show description for 836ef62
  

  dd32

  and

  iandunn

  authored
  836ef62

Commits on Apr 28, 2023

• Bump guzzlehttp/psr7 from 2.4.3 to 2.5.0 (WordPress#555)

  Show description for f027b04
  dependabot[bot]

  authored
  f027b04

• Simplify UI Text / more consistent text and UI. (WordPress#521)

  Show description for bb96a02
  dd32

  authored
  bb96a02

Commits on May 2, 2023

• Use the integer REST API type instead of number, to resolve overly strict user_id capability checks (WordPress#560)

  Show description for c725c9b
  spenserhale

  authored
  c725c9b

Commits on May 3, 2023

• Enqueue jQuery and wp.apiRequest for use within callbacks. (WordPress#561)

  dd32

  authored
  ff00842

Commits on May 11, 2023

• Revalidate two factor settings prior to allowing any two-factor changes to an account. (WordPress#529)

  Show description for 9032f2d
  

  dd32

  and

  iandunn

  authored
  9032f2d

Commits on May 17, 2023

• 2FA revalidation: Avoid prompting for revalidation when the user disables all 2fa methods (WordPress#567)

  Show description for 654ebb7
  

  dd32

  and

  iandunn

  authored
  654ebb7

Commits on Jun 1, 2023

• Sync two-factor session meta to newly created sessions (WordPress#574)

  Show description for 98830a9
  dd32

  authored
  98830a9

• Require a nonce be present for revalidate POST requests. (WordPress#575)

  dd32

  authored
  f21ed3c

Commits on Jul 14, 2023

• Bump tough-cookie from 4.1.2 to 4.1.3 (WordPress#579)

  Show description for f2227ab
  dependabot[bot]

  authored
  f2227ab

Commits on Jul 19, 2023

• Bump word-wrap from 1.2.3 to 1.2.4

  Show description for 62b677e
  dependabot[bot]

  authored
  62b677e

Commits on Sep 4, 2023

• Destroy existing sessions when activating 2FA. (WordPress#578)

  dd32

  authored
  237cc2c

• Bump version identifier

  

  dd32

  authored and

  iandunn

  committed
  5fe5af3

Commits on Sep 7, 2023

• Add method to disable an individual provider (WordPress#587)

  iandunn

  authored
  2b0d9bc

Commits on Oct 7, 2023

• Bump postcss from 8.4.17 to 8.4.31

  Show description for 63d50a7
  dependabot[bot]

  authored
  63d50a7

Commits on Feb 29, 2024

• Prefer "require_once" in a few spots.

  Show description for e802bd9
  JJJ

  authored
  e802bd9

• Merge pull request WordPress#595 from JJJ/issue-594

  Show description for 7e0d337
  kasparsd

  authored
  7e0d337

Commits on Apr 23, 2024

• Update readme.txt

  bph

  authored
  f033511

• Merge pull request WordPress#597 from bph/patch-1

  Show description for 4bb3180
  kasparsd

  authored
  4bb3180

• Merge pull request WordPress#589 from WordPress/dependabot/npm_and_yarn/postcss-8.4.31

  Show description for 48840ca
  kasparsd

  authored
  48840ca

• Merge pull request WordPress#582 from WordPress/dependabot/npm_and_yarn/word-wrap-1.2.4

  Show description for 9d4ce3b
  kasparsd

  authored
  9d4ce3b

• Bump webpack-dev-middleware from 5.3.3 to 5.3.4

  Show description for c1fe518
  dependabot[bot]

  authored
  c1fe518

• Bump follow-redirects from 1.15.2 to 1.15.6

  Show description for 9ff2df3
  dependabot[bot]

  authored
  9ff2df3

• Bump @babel/traverse from 7.19.3 to 7.24.1

  Show description for 5431fc1
  dependabot[bot]

  authored
  5431fc1

• Bump the version

  kasparsd

  committed
  f64b9c7

• Bump the stable tag too

  kasparsd

  committed
  b86efd5

• Merge branch 'master' into release/next

  kasparsd

  committed
  3e377a6

Commits on Apr 25, 2024

• Merge pull request WordPress#603 from WordPress/release/next

  Show description for dc27957
  kasparsd

  authored
  dc27957

• Bump axios and @wordpress/scripts

  Show description for 7d1c0ec
  dependabot[bot]

  authored
  7d1c0ec

• Merge pull request WordPress#602 from WordPress/dependabot/npm_and_yarn/multi-47ccb22638

  Show description for b57de23
  kasparsd

  authored
  b57de23

• Merge pull request WordPress#601 from WordPress/dependabot/npm_and_yarn/babel/traverse-7.24.1

  Show description for 15385ca
  kasparsd

  authored
  15385ca

• Merge pull request WordPress#600 from WordPress/dependabot/npm_and_yarn/webpack-dev-middleware-5.3.4

  Show description for 8c55686
  kasparsd

  authored
  8c55686

• Merge pull request WordPress#599 from WordPress/dependabot/npm_and_yarn/follow-redirects-1.15.6

  Show description for 88b503c
  kasparsd

  authored
  88b503c

• Remove trailing commas in parameters to avoid syntax error with some PHP versions (ex. 7.2.x)

  KZeni

  authored
  a0afd35

• Merge pull request WordPress#604 from KZeni/patch-2

  Show description for 5ec52bb
  kasparsd

  authored
  5ec52bb

• Update linter deps

  kasparsd

  committed
  4b30c61

• Check for 5.6+ compat in general

  kasparsd

  committed
  fa438e9

• Ignore test cache everywhere

  kasparsd

  committed
  d721235

• Do lint for PHP compat in general

  kasparsd

  committed
  7abe359

• Bump testing to latest too

  kasparsd

  committed
  9d7d3d7

• Match the rest of item formatting

  kasparsd

  committed
  7bac373

• No longer requires starting the environment

  kasparsd

  committed
  e849646

• Let composer resolve it from vendors

  kasparsd

  committed
  bef1d10

• Revert "No longer requires starting the environment"

  Show description for ee518ad
  kasparsd

  committed
  ee518ad

• Also exclude the build directory

  kasparsd

  committed
  c385383

• Merge pull request WordPress#605 from WordPress/fix-lint-php7

  Show description for 7d543ca
  kasparsd

  authored
  7d543ca

• Bump version

  kasparsd

  committed
  e03bdd3

• Merge pull request WordPress#606 from WordPress/release/next

  Show description for 1828c55
  kasparsd

  authored
  1828c55

Commits on Apr 30, 2024

• Rely on just-in-time translation loading

  swissspidy

  committed
  e46cc9a

• Properly define Requires * header in main plugin file

  swissspidy

  committed
  d31431c

• Merge pull request WordPress#608 from swissspidy/fix/load-textdomain

  Show description for 66faeef
  kasparsd

  authored
  66faeef

Commits on May 8, 2024

• update readme headers

  Show description for 3ddec26
  

  jeffpaul

  and

  kasparsd

  committed
  3ddec26

• update plugin headers

  Show description for c0af398
  

  jeffpaul

  and

  kasparsd

  committed
  c0af398

• fix license reference

  jeffpaul

  committed
  8eb3461

Commits on May 9, 2024

• Merge pull request WordPress#610 from WordPress/update/headers

  Show description for 8e70254
  jeffpaul

  authored
  8e70254

Commits on Jun 12, 2024

• update short description

  jeffpaul

  committed
  c08f82a

Commits on Jul 8, 2024

• Merge pull request WordPress#612 from WordPress/update/short-desc

  Show description for cc2c4ad
  jeffpaul

  authored
  cc2c4ad

Commits on Jul 15, 2024

• Fix typos (WordPress#617)

  szepeviktor

  authored
  36a749f

• Bump tested up to version to WP 6.6 (WordPress#616)

  mehul0810

  authored
  44f058b

• Fix errors reported by PHPStan

  szepeviktor

  committed
  668ae87

• More error fixes on level 2

  szepeviktor

  committed
  9ac7c2d

Commits on Jul 30, 2024

• Fire an action when a user revalidates their 2FA session. (WordPress#620)

  dd32

  authored
  e5d6b20

Commits on Aug 22, 2024

• Bump minimum WP to 6.3, minimum PHP to 7.2. (WordPress#625)

  Show description for e0b7ffd
  dd32

  authored
  e0b7ffd

• Remove old grunt deploy related code. See WordPress#543 (WordPress#627)

  dd32

  authored
  3a0b87b

• Update how GitHub actions & Unit Testing runs. (WordPress#624)

  Show description for 53042aa
  dd32

  authored
  53042aa

• Bump axios from 1.6.8 to 1.7.4 (WordPress#626)

  Show description for 595f8b5
  dependabot[bot]

  authored
  595f8b5

• Bump braces from 3.0.2 to 3.0.3 (WordPress#613)

  dependabot[bot]

  authored
  1cb21ad

• Included dev environment doesn't need composer run manually.

  Show description for f468760
  dd32

  authored
  f468760

Commits on Aug 31, 2024

• Bump webpack from 5.91.0 to 5.94.0

  Show description for f1bf362
  dependabot[bot]

  authored
  f1bf362

Commits on Sep 10, 2024

• Merge pull request WordPress#628 from WordPress/dependabot/npm_and_yarn/webpack-5.94.0

  dependabot[bot]

  authored
  cfbfcd2

Commits on Sep 17, 2024

• Update two factor options layout (WordPress#623)

  Show description for 71b4931
  

  thrijith

  and

  dd32

  authored
  71b4931

• Replace the h3 with a h2, Security keys nests under this.

  dd32

  committed
  f1dbd6e

• TOTP: Add accessibility for the QR Code, marking it as an image and giving it a proper title.

  dd32

  committed
  bb048cb

• Bump send and express

  Show description for efb96a5
  dependabot[bot]

  authored
  efb96a5

Commits on Sep 18, 2024

• Merge pull request WordPress#634 from WordPress/dependabot/npm_and_yarn/multi-cf87d80143

  Show description for 8141b10
  kasparsd

  authored
  8141b10

• Be specific about contributors

  kasparsd

  committed
  dbfe715

• Mention 2FA in short description for discoverability

  kasparsd

  committed
  49a2cc2

• Merge pull request WordPress#632 from dd32/fix/536

  Show description for 3437c77
  kasparsd

  authored
  3437c77

• Update screenshots to match the current UI

  kasparsd

  committed
  49e410a

• Merge branch 'master' into phpstan

  kasparsd

  authored
  65ea7ad

• Merge pull request WordPress#619 from szepeviktor/phpstan

  Show description for 8405126
  kasparsd

  authored
  8405126

• Introduce a helper to return all available two-factor providers (even if disabled) for uninstall purposes

  kasparsd

  committed
  423bb2d

• Let each provider announce the meta keys and options used

  kasparsd

  committed
  9119613

• Keep the same format

  kasparsd

  committed
  8ea9cd3

• Split into dedicated helpers to allow re-use for uninstall and setup

  kasparsd

  committed
  129cbfb

• Add the actual uninstall hook

  kasparsd

  committed
  369ead9

• Move inline because it isn’t really used anywhere else

  kasparsd

  committed
  638f6d1

• Account for classes being replaced for core providers

  kasparsd

  committed
  f5f75d2

• Describe the mapping logic

  kasparsd

  committed
  6f50ece

• Account for options too

  kasparsd

  committed
  5d3b529

• Report the meta keys to delete

  kasparsd

  committed
  9297b60

• Add the missing keys

  kasparsd

  committed
  8d1972f

• Pull in key name copies when no access otherwise

  kasparsd

  committed
  f4d463d

• Test the uninstall

  kasparsd

  committed
  72ee3e0

• Switch to a core helper

  kasparsd

  committed
  86bc007

• Add phpstan

  kasparsd

  committed
  572c288

• Ensure the class exists for phpstan

  kasparsd

  committed
  ea846be

• Add a warning for now

  kasparsd

  committed
  3b1c686

• This test no longer makes sense

  kasparsd

  committed
  d59daca

• Merge pull request WordPress#639 from WordPress/fix-two-factor-options-test

  Show description for acd9e9c
  kasparsd

  authored
  acd9e9c

• Merge branch 'master' into 630-fix-uninstall

  kasparsd

  authored
  077c220

• Merge branch 'master' into 618-add-phpstan

  kasparsd

  authored
  01a4137

• Merge branch 'master' into 631-meta-discoverability

  kasparsd

  authored
  fa4212a

• Use the verbose flag to include the error identifier for exclude

  kasparsd

  committed
  04ef5e7

• Version bump

  kasparsd

  committed
  7b77277

• Add the PHPstan checks to CI

  kasparsd

  committed
  47425c5

Commits on Sep 19, 2024

• Merge pull request WordPress#638 from WordPress/618-add-phpstan

  Show description for 3f41808
  kasparsd

  authored
  3f41808

• Merge pull request WordPress#636 from WordPress/update-screenshots

  Show description for 17d3c6c
  kasparsd

  authored
  17d3c6c

• Merge pull request WordPress#635 from WordPress/631-meta-discoverability

  Show description for 642f665
  kasparsd

  authored
  642f665

• Merge branch 'master' into 630-fix-uninstall

  kasparsd

  authored
  c152d19

• Merge pull request WordPress#637 from WordPress/630-fix-uninstall

  Show description for 6a95e7f
  kasparsd

  authored
  6a95e7f

• Merge branch 'master' into release/0.9.2

  kasparsd

  authored
  de63928

• Bump to 0.10.0 since we’re changing the profile markup in a potentially breaking way for integrations

  kasparsd

  committed
  534a14d

• Add notices

  kasparsd

  committed
  240bcce

• Add the default notice as a permanent information

  Show description for 1225521
  kasparsd

  committed
  1225521

Commits on Oct 24, 2024

• Focus in code input when totp is checked

  thrijith

  committed
  7ce0634

Commits on Nov 1, 2024

• Fix typo in selector

  thrijith

  committed
  8c029af

Commits on Nov 6, 2024

• Bump symfony/process from 5.4.40 to 5.4.46

  Show description for 71112f2
  dependabot[bot]

  authored
  71112f2

Commits on Dec 2, 2024

• Merge pull request WordPress#649 from WordPress/dependabot/composer/symfony/process-5.4.46

  Show description for 7044dce
  kasparsd

  authored
  7044dce

• Merge branch 'master' into release/0.9.2

  kasparsd

  authored
  cf57552

• Keep at minor bump due to dependency changes

  kasparsd

  committed
  d53da74

• Release 0.10.0

  kasparsd

  authored
  990c967

• Merge branch 'master' into 485-add-backup-notice

  kasparsd

  authored
  11c97f3

• Add additional escaping just in case

  kasparsd

  committed
  2284d6a

• Encourage users to configure a second recovery method

  kasparsd

  authored
  100587e

• Merge pull request WordPress#645 from thrijith/feature/update-ux-totp

  Show description for 636dc0b
  kasparsd

  authored
  636dc0b

Commits on Dec 3, 2024

• Full RFC6238 Compatibility

  Show description for 3d40c24
  ericmann

  committed
  3d40c24

• Port over the RFC reference tests

  ericmann

  committed
  93438be

• Fix Linting Error with ``set_time()

  Show description for 80c6819
  ericmann

  committed
  80c6819