Skip to content

v1.8.0

Choose a tag to compare

View all tags
@dknauss dknauss released this 30 Jun 09:07
v1.8.0
57e3702
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Softens the Two Factor dependency from a hard activation gate to a guided soft-check.

Highlights

  • No more dead-end activation. Replaces the hard Requires Plugins: two-factor gate: the plugin now activates on its own and safely no-ops until Two Factor is active, instead of failing with "required plugins are missing."
  • Guided fix. While Two Factor is inactive, an admin notice warns that 2FA is NOT being enforced and offers a one-click install/activate from WordPress.org (nonce- and capability-checked).
  • force_2fa_dependency_met() is now the single source of truth, reused by the enforcement filter and the notice.
  • New unit-tested helpers force_2fa_should_nag() / force_2fa_required_install_cap(); admin_notices + admin_post hooks wired.
  • Plugin description clarified to "the default, required login factor."
  • Docs: clearer mu-plugin setup — flat loader in mu-plugins/, full plugin stays in plugins/, with a directory diagram and how to disable.

Tests

42 unit/integration tests pass; PHPCS clean; Playground real-activation check green.

Full changelog: see readme.txt.

Assets 2
Loading