kobotoolbox / kpi / 24654785901

82%

master: 76%

Build Type

push

github

Committed by web-flow

Commit Message

feat(mfa): enable MFA unconditionally for all users DEV-1799 (#6939)

### 📣 Summary
This PR removes the `MfaAvailableToUser` whitelist model and all
subscription-based restrictions tied to Multi-Factor Authentication. MFA
is now universally available to all KoboToolbox users, governed only by
the global `MFA_ENABLED` configuration.

### 📖 Description
Historically, MFA was gated behind paid subscriptions or a specific
per-user whitelist (`MfaAvailableToUser`). As part of our push to make
security features available to everyone, this PR completely removes
those restrictions.

This PR:
- Deletes the `MfaAvailableToUser` model and its corresponding Django
Admin interface.
- Removes the subscription-check logic from
`MfaAdapter.is_mfa_enabled()`.
- Simplifies `permissions.py` to allow MFA access based solely on the
global `config.MFA_ENABLED` setting.
- Cleans up `environment.py` and related API endpoints that previously
exposed the whitelist status to the frontend.
- Refactors unit tests in `test_login.py`, `test_mfa_login.py`, and
`test_api_environment.py` to remove whitelist/subscription matrices and
verify universal access.

Coverage Stats

7780 of 11967 branches covered (65.01%)

0 of 4 new or added lines in 2 files covered. (0.0%)

6 existing lines in 2 files now uncovered.

29576 of 35994 relevant lines covered (82.17%)

5.79 hits per line