Require 2FA code before enabling 2FA

[XtremeOwnageDotCom]

Requirements

• This is a feature request and not a bug report. Otherwise, please create a new bug report instead.
• Please check to see if this request (or a similar one) already exists.
• It's a single feature. Please don't request multiple features in one issue.

Describe the feature you'd like

When a user wishes to enable 2FA, they should be required to entire at least one generated 2FA code, before 2FA is enabled.

This will prevent users from locking themselves out, by ensuring their code-generator, is properly configured and generating the expected. codes.

Ideal Flow.

1. User enables 2FA in their settings.
2. User is then, required to enter generated 2FA code before 2FA is fully enabled.
3. AFTER user enters valid 2FA code, 2FA is enabled.

Other related issues-

• #1544 - Add QR Code
• #3325 - Lemmy - Users are being locked out
• #3309 - Lemmy

[foss-]

This can be closed, right? 0.19.1 shows a dialog with a QR Code for 2FA setup asking for a 2FA code confirmation: