Merge pull request #594 from communitiesuk/no_two_factor_authentication_for_dev_env

No two factor authentication for development environment

app/models/user.rb

@@ -90,6 +90,8 @@ class User < ApplicationRecord
   end
 
   def need_two_factor_authentication?(_request)
+    return false if Rails.env.development?
+
     support?
   end
 

spec/models/user_spec.rb

@@ -140,6 +140,18 @@ RSpec.describe User, type: :model do
         expect(user.case_logs_filters).to eq(%w[status years user organisation])
       end
     end
+
+    context "when the user is in development environment" do
+      let(:user) { FactoryBot.create(:user, :support) }
+
+      before do
+        allow(Rails.env).to receive(:development?).and_return(true)
+      end
+
+      it "does not require 2FA" do
+        expect(user.need_two_factor_authentication?(nil)).to be false
+      end
+    end
   end
 
   describe "paper trail" do