Skip to content

Enable `vue_2fa_recovery_codes` feature flag by default

What does this MR do?

Related to #290113 (closed) and #267730 (closed)

Change introduced in !49078 (merged)

Enables the vue_2fa_recovery_codes feature flag by default. Has been enabled on gitlab.com since 12/14.

To encourage users to save their 2FA recovery codes the vue_2fa_recovery_codes FF enables a new view that adds "Copy codes", "Download codes" and "Print codes" buttons to the recovery codes view. It also disables the "Proceed" button until the the user has either copied, downloaded, or printed their codes.

Screenshots (strongly suggested)

Page Before After
Recovery codes Screen_Shot_2020-12-03_at_11.50.21_AM Screen_Shot_2020-12-03_at_11.45.22_AM
Recovery codes - Proceed enabled N/A Screen_Shot_2020-12-03_at_11.47.49_AM
Account after clicking "Proceed" Screen_Shot_2020-12-03_at_11.51.01_AM Screen_Shot_2020-12-03_at_11.45.56_AM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Peter Hegman

Merge request reports