Do not ask for 2fa authentication code when CoreUpdater is being requested (#13796)

Could fix an edge case where user is logged in, but hasn't confirmed the auth code (so the user is not actually logged in), and then an update appears.

1 files changed, 4 insertions, 0 deletions

diff --git a/plugins/TwoFactorAuth/TwoFactorAuth.php b/plugins/TwoFactorAuth/TwoFactorAuth.php
index 3c8118005e..e83599b8cd 100644
--- a/plugins/TwoFactorAuth/TwoFactorAuth.php
+++ b/plugins/TwoFactorAuth/TwoFactorAuth.php
@@ -150,6 +150,10 @@ class TwoFactorAuth extends \Piwik\Plugin
             return;
         }
 
+        if ($module === 'CoreUpdater') {
+            return;
+        }
+
         if ($module === Piwik::getLoginPluginName() && $action === 'logout') {
             return;
         }