Accessibility Limits in Jetstream 2FA QR Code Rendering

Goal

Evaluate and improve the accessibility of the 2FA setup UI in Laravel Jetstream.

Current State

Jetstream renders a QR code as an SVG without alt text or aria-label. Recovery codes are displayed as plain text and lack a copy‑to‑clipboard action. The 2FA section requires the user to re‑enter their password, and focus management for keyboard users is not guaranteed.

Unresolved Decision

It is unclear whether Jetstream enforces 2FA at login by default or expects developers to add enforcement logic.

Questions

1. Does the default Jetstream profile component provide an accessible alt text for the QR code SVG?
2. Is a copy‑to‑clipboard button for recovery codes available in the current Livewire stack?
3. Does Jetstream automatically enforce 2FA at user login, or must developers implement it?