We currently have notifications for 2FA being enabled/disabled, but we should have distinct notifications for when 2FA is already enabled, and another 2FA method is enabled. Possibly telling the user how many different ones are enabled.
Similarly, when one is disabled (but there's still >1 enabled), show a notification to let the user know that a specific method has been disabled.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T166622 Allow all users on all wikis to use OATHAuth | |||
| Open | None | T100375 Improve user experience of Two-Factor process | |||
| Open | None | T352856 Recovery code improvements | |||
| Open | None | T244348 Recovery option for WebAuthn | |||
| Open | None | T356004 Help password managers to detect TOTP login input | |||
| Open | None | T125653 Create new types of notifications | |||
| Open | None | T131788 Users should be notified when only two recovery codes are left | |||
| Open | None | T150601 Add option to generate new set of recovery codes | |||
| Open | None | T232336 Separate recovery codes into a separate MFA method | |||
| Open | • taavi | T242031 Allow multiple different 2FA devices | |||
| Open | • taavi | T353962 Add new notifications for additional 2FA being enabled/disabled |
Change 985617 had a related patch set uploaded (by Majavah; author: Majavah):
[mediawiki/extensions/OATHAuth@master] notifications: Store number of keys in notification data
Change 985618 had a related patch set uploaded (by Majavah; author: Majavah):
[mediawiki/extensions/OATHAuth@master] notifications: Show number of remaining devices
Change 985617 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] notifications: Store number of keys in notification data
Change 985618 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] notifications: Show number of remaining devices
I think all that's left on this one is when an "extra" device has been setup, and improving the wording/display for those in a similar way to the disable ones have been done