hryvinskyi/magento2-two-factor-auth-bypass

Module for bypassing Magento 2 two-factor authentication via environment configuration

1.0.0 2025-09-11 20:35 UTC

This package is auto-updated.

Last update: 2025-09-11 20:37:44 UTC


README

This Magento 2 module developed for bypassing two-factor authentication on staging or development environments. It allows you to disable 2FA for admin panel access and API token generation via environment configuration (app/etc/env.php) or console commands.

Installation

Manual Installation

  1. Copy the module to app/code/Hryvinskyi/TwoFactorAuthBypass/
  2. Run: bin/magento module:enable Hryvinskyi_TwoFactorAuthBypass
  3. Run: bin/magento setup:upgrade
  4. Run: bin/magento setup:di:compile

Composer Installation

composer require hryvinskyi/magento2-two-factor-auth-bypass
bin/magento module:enable Hryvinskyi_TwoFactorAuthBypass
bin/magento setup:upgrade
bin/magento setup:di:compile

Configuration

Manual Configuration

Add the following configuration to your app/etc/env.php:

return [
    // ... other configuration
    'two_factor_auth_bypass' => [
        'enabled' => true,                // Bypass 2FA for admin access
        'api_enabled' => true,           // Bypass 2FA for API token generation
    ],
];

Console Commands

Alternatively, use the provided console commands:

# Enable bypass for both admin and API (default)
bin/magento hryvinskyi:2fa:bypass:enable

# Enable bypass for admin access only
bin/magento hryvinskyi:2fa:bypass:enable --admin

# Enable bypass for API token generation only  
bin/magento hryvinskyi:2fa:bypass:enable --api

# Disable bypass for both admin and API (default)
bin/magento hryvinskyi:2fa:bypass:disable

# Disable bypass for admin access only
bin/magento hryvinskyi:2fa:bypass:disable --admin

# Disable bypass for API token generation only
bin/magento hryvinskyi:2fa:bypass:disable --api

# Check current bypass status
bin/magento hryvinskyi:2fa:bypass:status

Configuration Options

Option Type Default Description
enabled boolean false Enable bypass for admin panel access
api_enabled boolean false Enable bypass for API token generation

Requirements

  • PHP 8.1+
  • Magento 2.4.6+
  • Magento_TwoFactorAuth module

Support

If you encounter any issues or have questions, please contact the author or open an issue on GitHub.

License

This module is licensed under the MIT License - see the LICENSE file for details.

Author

Volodymyr Hryvinskyi Email: volodymyr@hryvinskyi.com GitHub: https://github.com/hryvinskyi