FEATURE: Enforce 2FA - Githubissues

JamesAlias commented 1 year ago

Provide a settings option to enforce the use of 2FA for all neos users.

TODO

[x] Documentation!

All issues below fixed
[x] When on "enforced" 2FA setup screen and I can change the URL to /neos then I get to the content view and like this I am able to circumvent the enforced setup of a second factor
[x] When second factor is set up & I correctly log in with username and password then I enter an infinite redirect loop login->two-factor-login->two-factor-login->two-factor-login->....
[x] When I have no session cookie on /neos/login then no new session is created
[x] When I have no session then I get redirected to Sandstorm\NeosTwoFactorAuthentication\Controller\LoginController and I get an exception because the the controller can not read account from the AuthToken

closes #5

Benjamin-K commented 1 year ago

This also closes #9.

JamesAlias commented 1 year ago

This also resolves #6