[5.X] Enable/disable forced two-factor authentication via config

[mihob]

Is it possible to enable/disable forced two-factor authentication via config? Is there a way to do this at the moment?

The background is that I would like to force 2FA-Auth for all users in the production environment. However, this is not necessary in our staging environment and also rather annoying in the local development environment.

[jamesmacwhite]

I would second this for local development contexts. For staging/non-live environments that are publicly accessible I'd consider 2FA to still be valid here, but certainly bypassing 2FA on local dev via GeneralConfig or environment variable override would be something I'd upvote

[brandonkelly]

Added a new disable2fa config setting for Craft 5.6! (#16426)

[brandonkelly]

Craft 5.6.0 is out now 🚀