I recently added this extension to my wiki and my users can get setup and work well. I have noticed that sometimes it seems like user rights disappear and I am wondering if this is due to the 2FA login "expiring"?
I usually tick the "Keep me signed in" box on the logon page. Does having 2FA change the functionality of this checkbox?
It seems that the rights in $wgOATHExclusiveRights, which I have set to move and delete, get removed after some period of time.
Is this the proper behavior? How long do rights stay active after adding 2FA?