Root/Admin to enforce 2FA for all users

Your current newapi version

v1.0.0-rc.34

Submission Checks

• Non-duplicate issue: I have searched existing Issues and confirmed there are no similar issues.
• Read this first: I have fully read the section above, reviewed the docs at https://docs.newapi.ai/ and the project README, and asked AI first, confirming this is not a usage, configuration, or integration question, and that the current version cannot meet my needs.
• Template intact: I have not removed any guidance or section headings from this template and will complete it as requested.
• Maintainer time: I understand that maintainers have limited time and issues that do not follow this template may be ignored or closed directly.

Feature Description

For security reason, especially for corporate internal use, root/admin should be able to enforce 2FA for all users instead of letting users to choose to enable or not. User can only login with 2FA.

Alternatively, when root/admin turn on the enforcement function, users without 2FA can still login but cannot use some of the functions.

Use Case

When higher security standard is required.

Start by tracing the existing login and 2FA flows, then locate the root/admin settings entry point. Clarify whether enforcement blocks login or restricts selected functions, define the affected user states and admin behavior, and add tests that demonstrate the chosen policy is applied consistently.