QR code not shown after enabling 2FA (Shopware 6 test installation)

[vafk18]

Hello Rune,

I am testing your Two Factor Authentication (Google Authenticator) plugin on a Shopware 6 test installation and I am running into an issue where the QR code is not displayed, even though the plugin appears to be installed and activated correctly.

Environment / setup: Shopware 6 (v6.7.5.1) (separate test site) installed via Composer:
composer require runelaenen/shopware6-two-factor-auth

Plugin installed and activated via:
bin/console plugin:refresh
bin/console plugin:install --activate RuneLaenenTwoFactorAuth

JavaScript built successfully:
./bin/build-js.sh

Cache cleared:
php bin/console cache:clear

What works:
Plugin is visible in Extensions
Plugin is enabled
Plugin is enabled for: Storefront
Sales channels (test storefront only)
Admin backend loads without errors
I can log in as admin normally

When I log on with admin/pass although Two-Factor Authentication is enabled no QR code is shown, no way to enroll Google Authenticator. There is no visible error message.

Additional details:
In Extensions, the Two-Factor Authentication plugin is listed and enabled
Headless and “Shopware Dev” sales channels are disabled
Only the test storefront sales channel is active
I am not using administration watcher mode
This is a developer/test installation, not production

Question: Is it possible that this plugin does not work with developer installations of Shopware?

If so: Which exact Shopware build/version do you recommend for testing this plugin?

Is there a known limitation regarding dev environments or specific Shopware versions?

Thank you for your work and any guidance.

Best regards
vafk18

[runelaenen]

Hi @vafk18
Thank you for the thorough report. Normally the plugin should work in any Shopware installation, no matter if it is dev or prod.

Does the browser console show any errors when you try setting up the 2FA in the admin screen?

[vafk18]

Hi Rune,
after installing the 2FA-plugin, a) the built-in admin never gets to use it (according to docs that is normal behavior). So I decided to provide a super strong password and never use it. After creation of a new user with admin rights you can immediately enable the 2FA and scan the QR code. Once you go back and then again on the new user with enabled 2FA you will not see the 2fa button, so you cannot disable it. When you create a 3rd user, same story.