Opened 9 days ago

Last modified 6 days ago

#7704 new enhancement

Release Confirmation should use 2FA for access

Reported by: dd32's profile dd32 Owned by:
Milestone: Priority: high
Component: Plugin Directory Keywords: has-patch


If an account has Two Factor enabled on their account, Release Confirmation should require revalidating their 2FA prior to confirming the release.

To streamline things, if the user has Two Factor enabled, an emailed link should not be required either. ie. They should be able to re-validate their 2FA to access the confirm button.

Change History (1)

This ticket was mentioned in PR #344 on WordPress/ by @dd32.

6 days ago

  • Keywords has-patch added

When a user has 2FA setup, we should rely upon that instead of email.

This is more secure, and for those who are using Keys, likely more streamlined.

This is a work in progress, and requires a few more steps.


Note: See TracTickets for help on using tickets.