Link to Application Passwords

[kasparsd]

Users might want to disable the two factor authentication for certain API requests so we should document the two_factor_user_api_login_enable filter and how to use it together with Application Passwords plugin.

[joostdekeijzer]

With Application Passwords in WP main code, the 2factor plugin effectively breaks that without the suggested hook in the Application Password plugin description.

Shouldn't this plugin just include that code so it just works?

I can create a PR for eg.

add_filter( 'application_password_did_authenticate', function() {
  add_filter( 'two_factor_user_api_login_enable', '__return_true' );
} );

[TimothyBJacobs]

Yeah, we should probably have the plugin handle this ootb.

[eiskalteschatten]

This would be an absolutely wonderful feature. I've had to disable this plugin on one of my blogs in order to use MarsEdit which uses XML-RPC to manage posts and pages. If the application password I created would allow skipping 2FA (as it does with most systems), that would be ideal.