By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
Allows the admin to force enable / disable 2fa for users. If the admin turns on 2fa for the user the next time they login they will be told they have to enable 2fa and walked through the setup process before they can login.
Also you can see the current 2fa status (enabled | disabled) on the access control / users page.
How to test?
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/1035
**Author:** [@jnewing](https://github.com/jnewing)
**Created:** 7/8/2025
**Status:** ✅ Merged
**Merged:** 7/13/2025
**Merged by:** [@miloschwartz](https://github.com/miloschwartz)
**Base:** `dev` ← **Head:** `feature-manage-2fa`
---
### 📝 Commits (3)
- [`2a6298e`](https://github.com/fosrl/pangolin/commit/2a6298e9eb3a021e629ebe8ac7f08288df0f6dab) Admins can enable 2FA
- [`0f3a5ce`](https://github.com/fosrl/pangolin/commit/0f3a5ce8ba9d867a5770b46a7fe5d33dd6415c5e) Added users 2FA statsu to userstable
- [`17b39d1`](https://github.com/fosrl/pangolin/commit/17b39d16a31fca4766da49f6042226175bef55b2) Merge branch 'dev' into feature-manage-2fa
### 📊 Changes
**14 files changed** (+880 additions, -8 deletions)
<details>
<summary>View changed files</summary>
➕ `server/routers/auth/completeTotpSetup.ts` (+179 -0)
📝 `server/routers/auth/index.ts` (+2 -0)
📝 `server/routers/auth/login.ts` (+13 -1)
➕ `server/routers/auth/setupTotpSecret.ts` (+127 -0)
📝 `server/routers/external.ts` (+9 -0)
📝 `server/routers/user/getOrgUser.ts` (+2 -1)
📝 `server/routers/user/index.ts` (+1 -0)
📝 `server/routers/user/listUsers.ts` (+2 -1)
➕ `server/routers/user/updateUser2FA.ts` (+151 -0)
📝 `src/app/[orgId]/settings/access/users/UsersTable.tsx` (+34 -0)
📝 `src/app/[orgId]/settings/access/users/[userId]/access-controls/page.tsx` (+63 -4)
📝 `src/app/[orgId]/settings/access/users/page.tsx` (+2 -1)
➕ `src/app/auth/2fa/setup/page.tsx` (+289 -0)
📝 `src/components/LoginForm.tsx` (+6 -0)
</details>
### 📄 Description
## Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
## Description
Allows the admin to force enable / disable 2fa for users. If the admin turns on 2fa for the user the next time they login they will be told they have to enable 2fa and walked through the setup process before they can login.
Also you can see the current 2fa status (enabled | disabled) on the access control / users page.
## How to test?
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/1035
Author: @jnewing
Created: 7/8/2025
Status: ✅ Merged
Merged: 7/13/2025
Merged by: @miloschwartz
Base:
dev← Head:feature-manage-2fa📝 Commits (3)
2a6298eAdmins can enable 2FA0f3a5ceAdded users 2FA statsu to userstable17b39d1Merge branch 'dev' into feature-manage-2fa📊 Changes
14 files changed (+880 additions, -8 deletions)
View changed files
➕
server/routers/auth/completeTotpSetup.ts(+179 -0)📝
server/routers/auth/index.ts(+2 -0)📝
server/routers/auth/login.ts(+13 -1)➕
server/routers/auth/setupTotpSecret.ts(+127 -0)📝
server/routers/external.ts(+9 -0)📝
server/routers/user/getOrgUser.ts(+2 -1)📝
server/routers/user/index.ts(+1 -0)📝
server/routers/user/listUsers.ts(+2 -1)➕
server/routers/user/updateUser2FA.ts(+151 -0)📝
src/app/[orgId]/settings/access/users/UsersTable.tsx(+34 -0)📝
src/app/[orgId]/settings/access/users/[userId]/access-controls/page.tsx(+63 -4)📝
src/app/[orgId]/settings/access/users/page.tsx(+2 -1)➕
src/app/auth/2fa/setup/page.tsx(+289 -0)📝
src/components/LoginForm.tsx(+6 -0)📄 Description
Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
Allows the admin to force enable / disable 2fa for users. If the admin turns on 2fa for the user the next time they login they will be told they have to enable 2fa and walked through the setup process before they can login.
Also you can see the current 2fa status (enabled | disabled) on the access control / users page.
How to test?
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.