The backend support for this exists now thanks to T242031, but the frontend prevents users from attempting to enable TOTP if WebAuthn is already enabled or vice versa. Once the UX is good enough, we should allow users to do this.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Allow using multiple modules, if so configured | Catrope | mediawiki/extensions/OATHAuth | master | +37 -9 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T399644 FY2025-26 WE4.6.2 Multiple Authenticators | |||
| Resolved | Catrope | T402467 Allow users to enable multiple authenticator types |
Event Timeline
Comment Actions
Change #1180674 had a related patch set uploaded (by Catrope; author: Catrope):
[mediawiki/extensions/OATHAuth@master] Allow using multiple modules, if so configured
Comment Actions
This patch does not yet enable multiple authenticator types in production; it just adds a config setting so that it can be enabled. For now we'll just use that for development so we can work on improving the user experience of using multiple authenticator types.
Comment Actions
Change #1180674 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] Allow using multiple modules, if so configured
Comment Actions
Closing this task, we can handle actually turning the config flag on as part of the broader rollout for multiple authenticators