Prevent wp_login hook proceeding without 2FA code
-
Hi Paul,
I have a custom plugin created by one of the devs over at flarum.org (see https://discuss.flarum.org/d/22229-premium-wordpress-integration) which works a treat in terms of connecting WordPress to Flarum and vice-versa. The only issue I see when using WP Shield is that the token is being passed to Flarum BEFORE the 2FA process has been completed, which seems to negate the effectiveness of the entire process ??
What I would like to have is the ability to “freeze” the authentication process at the point where 2FA is required, and for nothing else to take place until the correct code has been entered. It may be beneficial to understand where exactly the 2FA takes effect in terms of hooks so that the Flarum integration works correctly.
Let me know if this should be a pro ticket, and I’ll happily raise one (I have pro)
- The topic ‘Prevent wp_login hook proceeding without 2FA code’ is closed to new replies.