BookStackApp
Reset Multi-Factor-Authentification (MFA) in user settings through the UI
Describe the feature you'd like
Summary: Add a feature to the BookStack web interface that allows administrators to reset two-factor authentication (2FA) for users directly through the UI.
Use Case: Currently, when a user changes their mobile device and loses access to their 2FA app, there is no way to reset their 2FA settings via the web interface. As a result, even BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration. This is not feasible in environments where BookStack is hosted as a managed SaaS solution and administrators do not have console access.
Proposed Solution: Add an option within the admin user management interface to reset 2FA for individual users. This option could be placed in the user's profile or settings page and be accessible only to users with appropriate admin-level permissions.
Describe the benefits this would bring to existing BookStack users
- Improves usability for administrators in SaaS or restricted environments
- Reduces dependency on console access for routine account management tasks
- Aligns 2FA management with modern admin expectations for web applications
- Enhances user support and account recovery processes
Can the goal of this request already be achieved via other means?
BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration.
Additional context
This would be especially helpful in managed BookStack instances where the administrator role is functionally limited to the web interface, and server-level access is not available.
