From 30275cd80e8552d6cbcdeb11f83a4d5028aa6eae Mon Sep 17 00:00:00 2001 From: Claire Date: Mon, 30 Mar 2026 16:45:59 +0200 Subject: [PATCH] Disable extraneous devise strategies if `DISABLE_DEVISE_TWO_STRATEGIES` is set to `true` (#38486) --- config/initializers/devise.rb | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb index 149c1b1af4..cb3fd28be8 100644 --- a/config/initializers/devise.rb +++ b/config/initializers/devise.rb @@ -98,8 +98,11 @@ Devise.setup do |config| manager.default_strategies(scope: :user).unshift :two_factor_ldap_authenticatable if Devise.ldap_authentication manager.default_strategies(scope: :user).unshift :two_factor_pam_authenticatable if Devise.pam_authentication manager.default_strategies(scope: :user).unshift :session_activation_rememberable - manager.default_strategies(scope: :user).unshift :two_factor_authenticatable - manager.default_strategies(scope: :user).unshift :two_factor_backupable + + unless ENV['DISABLE_DEVISE_TWO_STRATEGIES'] == 'true' + manager.default_strategies(scope: :user).unshift :two_factor_authenticatable + manager.default_strategies(scope: :user).unshift :two_factor_backupable + end end # The secret key used by Devise. Devise uses this key to generate