Simon writes:

I’ve deploy the new 2FA implementation to idm-test.wikimedia.org. If you sign in, you should see a button labeled "Manage two factor authentication”. If you click that you’ll be guided though setting up 2FA for your account. It’s not currently connected to anything, so enabling it will not break or influence your actual 2FA anywhere.

Example:

import requests
headers = {'Authorization': 'Token 54ba5ed5eec4d6a5931f20e9e849be6fe410cfbd', 'Content-Type': 'application/json’}
url = 'https://idm-test.wikimedia.org/mediawiki/api/totp/'
payload = {'user': 'slyngshede', 'token': '123456’}
r = requests.post(headers=headers, json=payload, url=url)

This will return a JSON object. e.g. {"user":"slyngshede","valid":false,"enabled":false}
User is just echoing the username you provided in the post, valid indicates if the 2FA token is accepted and enabled tells you is the user has 2FA enabled or not.
I figured that might be hand to signal to the user that they need to enable 2FA.

I'm definitely going in circles here, but @bd808 suggests that we just skip ahead to https://phabricator.wikimedia.org/T359554 and let striker run without 2fa until 2fa is enabled in CAS. That would at least stop me being confused about what the intermediate steps are in all this.

Still relevant?

Change #1077444 had a related patch set uploaded (by Majavah; author: Majavah):

[labs/striker@master] auth: Properly remove OATHAuth support

https://gerrit.wikimedia.org/r/1077444

Change #1077444 merged by jenkins-bot:

[labs/striker@master] auth: Properly remove 2FA support

https://gerrit.wikimedia.org/r/1077444