Add filter for plugins to add support link to login form.

[StevenDufresne]

What?

Sometimes users have difficulty with their two-factor settings. In the "Having Problems?" section, we currently don't have a way to add links that are not providers.

This PR adds a filter called two_factor_login_support_links to allow plugins to provide non-provider support links.

Why?

We want to give users access to documentation that can help them with using 2fa or with recovering their account.

For example, it would allow us to do

Having Problems?
- Use your authenticator app
- Use a recovery code
- Recover your account

How?

It adds a filter inside the <ul> so HTML can be passed in like so:

add_filter( 'two_factor_login_backup_links', function($links) {
	return array_merge( $links, [ '<a href="#">My Link</a>' ] );
}, 10, 1 );

Testing Instructions

1. Add the filter mentioned above
2. With 2fa configured, try logging in
3. Expect to see the new link in the list.

Changelog Entry

Added - Filter named two_factor_login_backup_links to support adding links to login form.

[dd32]

Suggested change

	/*
	* Allow plugins to add links to the two-factor login form.
	*/
	$links = apply_filters( 'two_factor_login_support_links', $links );
	// Echo out the filtered links
	foreach ( $links as $link ) {
	echo wp_kses_post( $link );
	}
	/*
	* Allow plugins to filter the backup method links on the login form.
	*/
	$links = apply_filters( 'two_factor_login_backup_links', $links );
	// Echo out the filtered links
	echo implode( '', $links );

Given this filter only runs when there are backup providers, calling it a support links might be confusing for some, we can probably name it something like two_factor_login_backup_links?

There's probably an argument that this should be built prior to the if ( $backup_providers ) conditional to output filtered data even when there exist no backup methods for the given user?

I don't think we need to explicitly sanitize the HTML here either, it's either hard-coded HTML or from a PHP function that can do anything anyway.

[kasparsd]

This appears to be addressed in the follow-up commits.

[dd32]

These points remain:

Given this filter only runs when there are backup providers, calling it a support links might be confusing for some, we can probably name it something like two_factor_login_backup_links?

OR

There's probably an argument that this should be built prior to the if ( $backup_providers ) conditional to output filtered data even when there exist no backup methods for the given user?

I suspect the intention of the filter was actually to be used when the user has no backup provider, or, at least that others who would have a use for it would be in that group.

[kasparsd]

@StevenDufresne Was there anything else you wanted to include here or is this ready for merge?

If you don't get around to it, we'll extend the inline docblock for the filter to include documentation for the arguments (like here) and also add it to the relevant readme section.

[masteradhoc]

Thanks @georgestephanis for the review.

@StevenDufresne Sorry for the long waiting time. Would you be able to check the comments and provide an updated PR? We'd be happy to merge this asap :)

[github-actions]

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: StevenDufresne <dufresnesteven@git.wordpress.org>
Co-authored-by: masteradhoc <masteradhoc@git.wordpress.org>
Co-authored-by: georgestephanis <georgestephanis@git.wordpress.org>
Co-authored-by: dd32 <dd32@git.wordpress.org>
Co-authored-by: kasparsd <kasparsd@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

[StevenDufresne]

@masteradhoc I'm not certain if I'll be able to get to this shortly. Apart my now dated desire for this feature, are there any other reasons for this to become a high priority for me?

[masteradhoc]

@georgestephanis per your comment i've adjusted the code and suggested several adjustments. Feel free to commit them if they are fine for you.

Im able to use the filter perfectly in this way

add_filter( 'two_factor_login_backup_links', 'twentytwentyfive_two_factor_login_backup_links' );

function twentytwentyfive_two_factor_login_backup_links( $links ) {
	$links[] = array(
		'url'   => 'https://google.com',
		'label' => __( 'Contact the support team', 'twentytwentyfive' ),
	);

	return $links;
}

[georgestephanis]

I'll give it a look in the AM, but if anyone beats me to it feel free to ⛴️

[masteradhoc]

Thanks for your work here @StevenDufresne - we've been able to merge it now. Sorry again for the long waiting time.

[StevenDufresne]

Thanks for getting this across the line @georgestephanis @masteradhoc!