1881167 - Don't force users to login via e-mail at Discourse.

Status: UNCONFIRMED

(mozilla.org :: Discussion Forums, enhancement)

Description

[Mr. Beedell, Roke Julian Lockhart]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0

Steps to reproduce:

I attempted to log in to https://discourse.mozilla.org/login via https://auth.mozilla.auth0.com/login.

Actual results:

Per https://wiki.mozilla.org/IAM/Frequently_asked_questions#Q:_Why_do_you_support_email_login_.28.22passwordless.22.29_if_it.27s_less_safe_than_other_methods.3F, I am forced to use “passwordless” login, which involves me switching contexts to my e-mail client.

Expected results:

I should be able to enter my password and TOTP codes. In fact, I should be able to disable “passwordless” login entirely in order to increase security — I was of the opinion that 2FA couldn't be bypassed, but was incorrect!