kobotoolbox / kpi / 24654785901 / 4

82%

master: 76%

push

github

feat(mfa): enable MFA unconditionally for all users DEV-1799 (#6939)

### 📣 Summary
This PR removes the `MfaAvailableToUser` whitelist model and all
subscription-based restrictions tied to Multi-Factor Authentication. MFA
is now universally available to all KoboToolbox users, governed only by
the global `MFA_ENABLED` configuration.

### 📖 Description
Historically, MFA was gated behind paid subscriptions or a specific
per-user whitelist (`MfaAvailableToUser`). As part of our push to make
security features available to everyone, this PR completely removes
those restrictions.

This PR:
- Deletes the `MfaAvailableToUser` model and its corresponding Django
Admin interface.
- Removes the subscription-check logic from
`MfaAdapter.is_mfa_enabled()`.
- Simplifies `permissions.py` to allow MFA access based solely on the
global `config.MFA_ENABLED` setting.
- Cleans up `environment.py` and related API endpoints that previously
exposed the whitelist status to the frontend.
- Refactors unit tests in `test_login.py`, `test_mfa_login.py`, and
`test_api_environment.py` to remove whitelist/subscription matrices and
verify universal access.

3979 of 11830 branches covered (33.63%)

19946 of 35911 relevant lines covered (55.54%)

0.56 hits per line