Force Users to Enable Two-Factor Authentication in Umbraco 13

EnforceTwoFactorAuthentication.js

(() => {
    
    angular.module("umbraco").run(["authResource", "twoFactorLoginResource", "editorService", "notificationsService", "eventsService",  async (authResource, twoFactorLoginResource, editorService, notificationsService, eventsService) => {
        const state = {};
        
        const init = async (firstInit) => {
            "app.ready"
            state.currentUser = await authResource.getCurrentUser();
            state.twoFactorAuthProviders = await twoFactorLoginResource.get2FAProvidersForUser(state.currentUser.id);

            if(firstInit && !twoFactorIsEnabled()) {
                configureTwoFactor();
            }
        };
        
        const twoFactorIsEnabled = () => {
            return !!state.twoFactorAuthProviders.find(provider => provider.isEnabledOnUser);
        };
        
        const configureTwoFactor = () => {
            
            editorService.open({
                create: true,
                user: state.currentUser,
                isCurrentUser: true,
                size: "small",
                view: "views/common/infiniteeditors/twofactor/configuretwofactor.html",
                close: async () => {
                    await init();
                    
                    if(twoFactorIsEnabled()) {
                        notificationsService.success("Two-Factor Auth", "You have successfully configured two-factor authentication.");
                        editorService.close();
                    } else {
                        notificationsService.error("Two-Factor Auth", "You must configure two-factor authentication before continuing.");
                    }
                }
            });
        };
        
        eventsService.on("app.ready", (name, args) => {
            init(true);
        });
    }]);
})();

package.manifest

{
    "javascript": [
        "~/App_Plugins/path/to/EnforceTwoFactorAuthentication.js"
    ]
}

Suggestions:

1. Add a setting to appsettings.json to enforce this policy.
2. Add localization to support multiple languages.
3. Consider extending the backend with the same checks—this is a UI solution only.

Hey this is great! Just thought I'd ask on the off-chance but have you managed to port this over to Lit / Belissima for U14/15 yet?

@InfiniteSpirals Good question! I'll try to tackle something similar over the weekend against the latest version of 15.

@markadrake - fantastic! :)

Hey @markadrake
This works in umbraco 13 but not for 14/15.
Can you please let me know, have you tried same for umbraco version 15?

Where abouts in Umbraco 13 would you place this code, and is there any other config to do other than the usual Umbraco 2FA stuff?