Fortify and 2FA

Hello,

Hmmm ... I have setup 2FA with Fortify and it works fine.

There is just something weird.

Step 1 : the user is redirected to the two-factor settings page and either accept to enable the 2 factor authentication or not (buttons I accept / I decline)

Step 2 : the user must type confirm the enable action with his/her password

Step 3 : the user is redirected to the two-factor settings page and has once again to accept or decline

The accept button submits a POST form to the two-factor.enable route and according to the documentation should set the session status to two-factor-authentication-enabled, but it's not the case, the session status is not set to two-factor-authentication-enabled.

Why ?

https://laravel.com/docs/12.x/fortify#enabling-two-factor-authentication

What do you suggest me to check ?

Other question : if the confirmation fails, Fortify seems to not delete the codes from the database, which should be logical to be done.

Thanks for your help.

V