Shouldn't two-factor authentication work without cookie consent?

[gvkries]

Two-factor authentication is blocked if cookies are not accepted. I think this is not necessary, because authentication cookies are essential and must always be allowed.

See:

OrchardCore/src/OrchardCore.Modules/OrchardCore.Users/Views/TwoFactorAuthentication/Index.cshtml

Line 26 in 9a1d682

var canTrack = ViewContext.HttpContext.Features.Get<ITrackingConsentFeature>()?.CanTrack ?? true;

OrchardCore/src/OrchardCore.Modules/OrchardCore.Users/Views/TwoFactorAuthentication/Index.cshtml

Lines 36 to 44 in 9a1d682

	@if (!canTrack)
	{
	<div class="alert alert-danger text-center">
	<strong>@T["Privacy and cookie policy have not been accepted."]</strong>
	<p>@T["You must accept the policy before you can enable two-factor authentication."]</p>
	</div>
	return;
	}

/cc @MikeAlhayek @Piedone

[MikeAlhayek]

Yeah that condition should be removed. Do you want to submit a PR?

[gvkries]

Alright, I can do it.