Two-factor autentication intercept

A few ideas of how you can make it work.

This is how you can get the user's data:
https://xlinesoft.com/phprunner/docs/secapi_get_user_data.htm

$data = Security::getUserData( $username);

Then you can call this function:
Security::twoFactorEnabled( $data["field name for 2fa"] );

It will return either an empty string or one of the following: totp, email, phone

This should be enough for this purpose.