{"action":"created","issue":{"url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/176","repository_url":"https://api.github.com/repos/Bouke/django-two-factor-auth","labels_url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/176/labels{/name}","comments_url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/176/comments","events_url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/176/events","html_url":"https://github.com/Bouke/django-two-factor-auth/issues/176","id":184707190,"number":176,"title":"Skipping Login check when using @otp_required decorator","user":{"login":"maxcanada","id":3610403,"avatar_url":"https://avatars.githubusercontent.com/u/3610403?v=3","gravatar_id":"","url":"https://api.github.com/users/maxcanada","html_url":"https://github.com/maxcanada","followers_url":"https://api.github.com/users/maxcanada/followers","following_url":"https://api.github.com/users/maxcanada/following{/other_user}","gists_url":"https://api.github.com/users/maxcanada/gists{/gist_id}","starred_url":"https://api.github.com/users/maxcanada/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/maxcanada/subscriptions","organizations_url":"https://api.github.com/users/maxcanada/orgs","repos_url":"https://api.github.com/users/maxcanada/repos","events_url":"https://api.github.com/users/maxcanada/events{/privacy}","received_events_url":"https://api.github.com/users/maxcanada/received_events","type":"User","site_admin":false},"labels":[{"id":13704110,"url":"https://api.github.com/repos/Bouke/django-two-factor-auth/labels/question","name":"question","color":"cc317c","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-10-23T18:44:52Z","updated_at":"2016-11-03T20:29:27Z","closed_at":"2016-11-03T20:29:27Z","body":"Hello!\n\nI am implementing Django two-factor-auth on my website and I would love to have some views protected by two-FA, and some other not.\n\nIn order to do so, I use the decorator @otp_required which works great, but unfortunately asks the users to input their credentials again (to handle user sessions, I use the registration module).\n\nWould you be able to give me a good to way to hack the form in order to just ask the user to input the token (skipping a step of the form, basically) ?\n\nThanks a lot, \n"},"comment":{"url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/comments/258264387","html_url":"https://github.com/Bouke/django-two-factor-auth/issues/176#issuecomment-258264387","issue_url":"https://api.github.com/repos/Bouke/django-two-factor-auth/issues/176","id":258264387,"user":{"login":"Bouke","id":235882,"avatar_url":"https://avatars.githubusercontent.com/u/235882?v=3","gravatar_id":"","url":"https://api.github.com/users/Bouke","html_url":"https://github.com/Bouke","followers_url":"https://api.github.com/users/Bouke/followers","following_url":"https://api.github.com/users/Bouke/following{/other_user}","gists_url":"https://api.github.com/users/Bouke/gists{/gist_id}","starred_url":"https://api.github.com/users/Bouke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Bouke/subscriptions","organizations_url":"https://api.github.com/users/Bouke/orgs","repos_url":"https://api.github.com/users/Bouke/repos","events_url":"https://api.github.com/users/Bouke/events{/privacy}","received_events_url":"https://api.github.com/users/Bouke/received_events","type":"User","site_admin":false},"created_at":"2016-11-03T20:29:27Z","updated_at":"2016-11-03T20:29:27Z","body":"If a user has enabled two factor, it will always ask the user to enter their second factor. There is no conditional logic depending on the page that's requested. The reasoning behind this is to secure the user's account -- not the page being visited per se.\r\n\r\nThere is no clean way to change how this works, as that is currently not supported by this package. "}}
{"actor":{"display_login":"Bouke"}}