After login with standard FE Login there already is access to protected pages

[OrangeLeinad]

Detected with TYPO3 V9.5.18 and Ext:cf_google_authenticator V1.2.2

I did the installation for frontend login purpose according to your manual description. After installation I got this frontend view, see picture 1:

Afterwards if I logged in successfully I already see the protected area, even though I didn't login through 2 factor authentication! See picture 2:

My expectation was, that only after succesfull login with 2 factor authentication I can see the protected area. Have I forgot something in the configuration?

Thanks in advance for your support.

[codeFareith]

Is 2FA already enabled by the desired FE user?

[OrangeLeinad]

Are you referring to the backend according to following image?

[codeFareith]

Hi @OrangeLeinad,

yes. Actually there are two ways to enable two-factor authentication for a specific FE-User:

1. edit the specific frontend user record, via Backend (your screenshot)
2. create a page - only visible to logged-in users - and add the frontend plugin to that page. This way, every frontend user can set up two-factor authentication by himself.