spawntree
/
magento-test
2
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2 Commits
1 Branch
70 MiB
 
 
 
 
 
 
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
magento-test/app/code/Magento/Security
Florian Eisenmenger 41ccc32b5d checkin 2 years ago
..
Api/Data checkin 2 years ago
Block checkin 2 years ago
Controller/Adminhtml/Session checkin 2 years ago
Model checkin 2 years ago
Observer checkin 2 years ago
Setup/Patch/Data checkin 2 years ago
Test checkin 2 years ago
etc checkin 2 years ago
i18n checkin 2 years ago
view checkin 2 years ago
LICENSE.txt checkin 2 years ago
LICENSE_AFL.txt checkin 2 years ago
README.md checkin 2 years ago
composer.json checkin 2 years ago
registration.php checkin 2 years ago

README.md

Security

Security management module Main features:

  1. Added support for simultaneous admin user logins with ability to enable/disable the feature, review and disconnect the list of current logged in sessions
  2. Added password complexity configuration
  3. Enhanced security to prevent account takeover for sessions opened on public computers and similar:
    • Password confirmation for all critical flows (like password, email change)
    • Lockout of the account after a configurable amount of incorrect login/password entries
    • Password Change functionality is enhanced by email and/or ip address by frequency, number and requests per hour limitation
    • Change password link becomes invalid after the first use or after a configurable amount of time
    • Password/email change notifications are sent to both old and new email addresses
  4. Fixed: the password is not being reset until the new password is submitted via the form available by a one time link sent to the email address