staff can enforce mandatory MFA for a user

This commit is contained in:
Spine
2026-05-27 23:29:06 +02:00
parent 30eaaa04fc
commit 4a25126da1
11 changed files with 112 additions and 14 deletions
@@ -32,6 +32,9 @@ class UserMultiFactorAuthTest extends TestCase {
}
public function testMFA(): void {
$this->user->toggleAttr('enforce-mfa', true);
$this->assertTrue($this->user->enforceMFA(), 'user-needs-mfa');
$mfa = $this->user->MFA();
$secret = $mfa->generateSessionSecret();
$manager = new Manager\UserToken();
@@ -51,6 +54,7 @@ class UserMultiFactorAuthTest extends TestCase {
$this->user->auditTrail()->hasEvent(Enum\UserAuditEvent::mfa),
'utest-mfa-audit'
);
$this->assertFalse($this->user->enforceMFA(), 'user-has-mfa');
$burn = array_pop($recovery);
$this->assertFalse($mfa->burnRecovery('no such key'), 'utest-no-burn-mfa');