Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author oskarhane

    (@oskarhane)

    Yes, it’s on my todo list.
    I will write a small text above the button with some explanation for whats going on and why the button is there.
    Will be released later this week.

    Thread Starter corelan

    (@corelan)

    thanks

    would it also be possible to provide a switch to disable two factor for xmlrpc ? It looks like windows live writer doesn’t play nice with the plugin.
    thanks

    Plugin Author oskarhane

    (@oskarhane)

    Ah, yes, I’ll look into fixing the XMLRPC issue.
    Thanks.

    Plugin Author oskarhane

    (@oskarhane)

    In the new version (4.2.2) Two Factor Auth for XMLRPC is disabled by default. There is a switch under “Settings”->”Two Factor Auth” to turn it on.

    There is also a new small text by the OTP-field on the login text advising users to check their email.

    Thread Starter corelan

    (@corelan)

    thanks for the updates

    may I suggest one more change ? Right now, the users may still be confused about the text of the button itself… I guess it would make sense to indicate that they need to click the button to generate / send the OTP code…

    Alternatively, maybe it would even make sense to ask users to enter the OTP on a separate page, *after* they have authenticated… that way you can simply send the OTP without even asking users to click the button; and only after the user has been authenticated already…

    Not sure if that is possible tho without causing other security issues… was just thinking out loud

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘a little confused’ is closed to new replies.