1.6.5 2fa on by default?

[yaboc]

when i updated to 1.6.5 2fa turned on when i had it off previously.
i did not run git stash on 1.6.6 update, is that going to mess things up ?
should i rerun the whole 1.6.6 update with git stash ? everything appears to be fine after disabling email_challenge.

 

[pbxgeek]

if you didn’t run into any issues you are good to go. Some people that had enabled prior might need may need to git stash.

Here’s the official tutorial how to enable it for all new installs. It won’t be on by default.

How to Enable Two-Factor Authentication | FS PBX – Open Source PBX Dashboard for VoIP Providers

Email Challenge adds an extra layer of security to user logins. When this setting is enabled, users will be required to complete a verification step by email during sign-in.

www.fspbx.com

 

[yaboc]

if you didn’t run into any issues you are good to go. Some people that had enabled prior might need may need to git stash.

Here’s the official tutorial how to enable it for all new installs. It won’t be on by default.

How to Enable Two-Factor Authentication | FS PBX – Open Source PBX Dashboard for VoIP Providers

Email Challenge adds an extra layer of security to user logins. When this setting is enabled, users will be required to complete a verification step by email during sign-in.

www.fspbx.com

so i didnt have any issues after upgrade except i had 2fa on a while ago to test it and took it off right after and been doing upgrades since then with 2fa off.
when i upgraded to 1.6.5 it got turned on without me enabling it
then i upgraded to 1.6.6 without git stash and it was still on and i just disabled it in default settings.

hopefully i didn't break anything or made future updates problematic. thanks @pbxgeek !

 

[pbxgeek]

It was turned on by accident in the previous update and rolled back in the latest update.

So it won’t be on by default for new installs. However, I highly recommend turning it on as soon as the email feature is configured.

It will protect your PBX from an unauthorized access.

 

[yaboc]

It was turned on by accident in the previous update and rolled back in the latest update.

So it won’t be on by default for new installs. However, I highly recommend turning it on as soon as the email feature is configured.

It will protect your PBX from an unauthorized access.

ahh i see i have not turned it off after 1.6.5 update. any plans to introduce app totp in addition to email?

 

[pbxgeek]

Yes, more work will be done towards that goal in the future as time permits.