Use 2FA when resetting a forgotten password if found/setup.

[CaMer0n]

As it says. :-)

[Moc]

@CaMer0n I think we'd need a new event trigger for this in core (/fpw.php). Something like this;

if($invalid = e107::getEvent()->trigger("user_fpw_request", $row))
{
	fpw_error($invalid);
	exit;
}

Not sure where specifically though, maybe line 253?

What do you think?

[Moc]

@CaMer0n Hmm, actually. I need something more I think. With 'login' I can use validLogin(). For FPW, I also need some way to 'hook' back into the process after validating the 2FA code.

See my latest commit: c3e8058
(line 213 of twofactorauth_class.php specifically: c3e8058#diff-7f881b6df975039216189630e140cc7c603a29049cf5d75f3150d441d1be97cfR213)

[CaMer0n]

@Moc I would use override. That's how we did it for visualcaptcha.

[Moc]

@CaMer0n but then it would not be possible to use both captcha and 2FA on Forgotten Password.

[CaMer0n]

Good point. Will look at what events can be added.