diff --git a/core/Controller/JsController.php b/core/Controller/JsController.php
index 5754c554e5046..bb40a4f21170a 100644
--- a/core/Controller/JsController.php
+++ b/core/Controller/JsController.php
@@ -42,6 +42,7 @@ public function __construct(
 
 	/**
 	 * @NoSameSiteCookieRequired
+	 * @NoTwoFactorRequired
 	 *
 	 * @param string $fileName js filename with extension
 	 * @param string $appName js folder name
@@ -75,6 +76,8 @@ public function getJs(string $fileName, string $appName): Response {
 	}
 
 	/**
+	 * @NoTwoFactorRequired
+	 *
 	 * @param ISimpleFolder $folder
 	 * @param string $fileName
 	 * @param bool $gzip is set to true if we use the gzip file