These are some new middleware groups required to call the two factor auth routines at the right moments.

app/Http/Kernel.php

@@ -4,6 +4,7 @@ declare(strict_types = 1);
 namespace FireflyIII\Http;
 
 use FireflyIII\Http\Middleware\Authenticate;
+use FireflyIII\Http\Middleware\AuthenticateTwoFactor;
 use FireflyIII\Http\Middleware\Binder;
 use FireflyIII\Http\Middleware\EncryptCookies;
 use FireflyIII\Http\Middleware\Range;
@@ -57,6 +58,15 @@ class Kernel extends HttpKernel
                 ShareErrorsFromSession::class,
                 VerifyCsrfToken::class,
                 Authenticate::class,
+                AuthenticateTwoFactor::class,
+            ],
+            'web-auth-no-two-factor' => [
+                EncryptCookies::class,
+                AddQueuedCookiesToResponse::class,
+                StartSession::class,
+                ShareErrorsFromSession::class,
+                VerifyCsrfToken::class,
+                Authenticate::class,
             ],
             'web-auth-range'         => [
                 EncryptCookies::class,
@@ -65,6 +75,7 @@ class Kernel extends HttpKernel
                 ShareErrorsFromSession::class,
                 VerifyCsrfToken::class,
                 Authenticate::class,
+                AuthenticateTwoFactor::class,
                 Range::class,
                 Binder::class,
             ],