Merge branch 'AC10982' of https://github.com/magento-gl/security-package into AC10982

Author: glo05363

TwoFactorAuth/Model/Provider/Engine/DuoSecurity.php

@@ -121,14 +121,12 @@ public function __construct(
         ScopeConfigInterface $scopeConfig,
         EncryptorInterface $encryptor,
         UrlInterface $urlBuilder,
-        FormKey $formKey,
         Client $client = null,
         DuoAuth $duoAuth = null
     ) {
         $this->scopeConfig = $scopeConfig;
         $this->encryptor = $encryptor;
         $this->urlBuilder = $urlBuilder;
-        $this->formKey = $formKey;
         if ($this->isDuoForcedProvider()) {
             $this->client = $client ?? new Client(
                     $this->getClientId(),
@@ -228,9 +226,6 @@ public function verify(UserInterface $user, DataObject $request): bool
         if (empty($savedState) || empty($username)) {
             return false;
         }
-        if ($this->formKey->getFormKey().static::AUTH_SUFFIX != $savedState) {
-            return false;
-        }
 
         try {
             // Not saving token as this is just for verificaiton purpose