Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password validation can't be disabled #1488

Closed
l-alexandrov opened this issue May 8, 2024 · 1 comment
Closed

Password validation can't be disabled #1488

l-alexandrov opened this issue May 8, 2024 · 1 comment

Comments

@l-alexandrov
Copy link

Jetstream Version

4.0.5

Jetstream Stack

Livewire

Laravel Version

10.46.0

PHP Version

8.2.16

Database Driver & Version

No response

Description

Despite the fact I've disabled password validation, it's still required for 2FA activation. The two-factor-authentication-form component renders the component for password confirmation without checking if confirmation is required.

Btw, I think it's applicable to latest Jetstream version as well.

Steps To Reproduce

  1. Log in to a user without 2FA activated
  2. Disable password confirmation in config/fortify.php via:
Features::twoFactorAuthentication([
    'confirmPassword' => false
]),
  1. Go to /user/profile
  2. Try to enable 2FA
  3. See that you are still required to confirm your password
@crynobone
Copy link
Member

See #1464 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants