How 2FA sessions work in Filament Breezy
3.xTwo-Factor Authentication (2FA) sessions in Breezy are governed by the following rules:
- Guard Scope: By default, Breezy uses the same guard defined on your Filament Panel (defaulting to
'web'). Only panels that have registered theBreezyCoreplugin have access to 2FA. - Multi-Panel Behavior: If multiple panels use 2FA and share the same guard, a user only needs to enter their OTP once for the duration of the session.
- Session Lifetime: The 2FA session lasts for the duration of the Laravel session lifetime. Users must re-enter the OTP if they log out or if the session expires.
- Interaction with Email Verification: When 2FA is configured, the user is prompted for the OTP code before being prompted for email verification (
MustVerifyEmail).