Making WordPress.org

Opened 9 days ago

Last modified 6 days ago

#7704 new enhancement

Release Confirmation should use 2FA for access

Reported by: dd32's profile dd32 Owned by:
Milestone: Priority: high
Component: Plugin Directory Keywords: has-patch
Cc:

Description

If an account has Two Factor enabled on their account, Release Confirmation should require revalidating their 2FA prior to confirming the release.

To streamline things, if the user has Two Factor enabled, an emailed link should not be required either. ie. They should be able to re-validate their 2FA to access the confirm button.

Change History (1)

This ticket was mentioned in PR #344 on WordPress/wordpress.org by @dd32.


6 days ago
#1

  • Keywords has-patch added

When a user has 2FA setup, we should rely upon that instead of email.

This is more secure, and for those who are using Keys, likely more streamlined.

This is a work in progress, and requires a few more steps.

See https://meta.trac.wordpress.org/ticket/7704

Note: See TracTickets for help on using tickets.