Front-end MFA support

src/auth/methods/AuthMethodInterface.php

@@ -66,6 +66,13 @@ public function isActive(): bool;
      */
     public function getSetupHtml(string $containerId): string;
 
+    /**
+     * Returns the data needed to render the authentication method’s setup form.
+     *
+     * @return array
+     */
+    public function getSetupData(): array;
+
     /**
      * Returns the HTML for the authentication method’s authentication form.
      *

src/auth/methods/BaseAuthMethod.php

@@ -23,6 +23,14 @@ abstract class BaseAuthMethod extends Component implements AuthMethodInterface
      */
     protected User $user;
 
+    /**
+     * @inheritdoc
+     */
+    public function getSetupData(): array
+    {
+        return [];
+    }
+
     /**
      * @inheritdoc
      */

src/auth/methods/TOTP.php

@@ -73,6 +73,19 @@ public function isActive(): bool
         return self::secretFromDb($this->user->id) !== null;
     }
 
+    /**
+     * @inheritdoc
+     */
+    public function getSetupData(): array
+    {
+        $secret = $this->secret();
+
+        return [
+            'secret' => trim($secret),
+            'qrCode' => $this->generateQrCode($secret),
+        ];
+    }
+
     /**
      * @inheritdoc
      */

src/controllers/AuthController.php

@@ -8,6 +8,7 @@
 namespace craft\controllers;
 
 use Craft;
+use craft\auth\methods\AuthMethodInterface;
 use craft\auth\methods\RecoveryCodes;
 use craft\auth\methods\TOTP;
 use craft\helpers\Html;
@@ -96,6 +97,40 @@ public function actionMethodListingHtml(): ?Response
         ]);
     }
 
+    /**
+     * Returns the data for available authentication methods.
+     *
+     * @return Response
+     */
+    public function actionGetMethods(): Response
+    {
+        $this->requireAcceptsJson();
+
+        return $this->asJson([
+            'methods' => array_map(
+                fn(AuthMethodInterface $method) => $this->authMethodData($method),
+                Craft::$app->getAuth()->getAvailableMethods(),
+            ),
+        ]);
+    }
+
+    /**
+     * Returns the data needed to set up an authentication method.
+     *
+     * @return Response
+     */
+    public function actionMethodSetupData(): Response
+    {
+        $this->requirePostRequest();
+        $this->requireAcceptsJson();
+        $this->requireElevatedSession();
+
+        $class = $this->request->getRequiredBodyParam('method');
+        $method = Craft::$app->getAuth()->getMethod($class);
+
+        return $this->asJson($method->getSetupData());
+    }
+
     /**
      * Remove auth type setup (for 2FA or Passkeys) from the database
      *
@@ -105,7 +140,6 @@ public function actionMethodListingHtml(): ?Response
      */
     public function actionRemoveMethod(): ?Response
     {
-        $this->requireCpRequest();
         $this->requirePostRequest();
         $this->requireElevatedSession();
 
@@ -263,6 +297,17 @@ private function passkeyTableHtml(): string
         ]);
     }
 
+    private function authMethodData(AuthMethodInterface $method): array
+    {
+        return [
+            'class' => $method::class,
+            'name' => $method::displayName(),
+            'description' => $method::description(),
+            'actionMenuItems' => $method->getActionMenuItems(),
+            'isActive' => $method->isActive(),
+        ];
+    }
+
     /**
      * Generates new recovery codes.
      *