Florian Eisenmenger 41ccc32b5d checkin		2年前
..
Api/Data	checkin	2年前
Block	checkin	2年前
Controller/Adminhtml/Session	checkin	2年前
Model	checkin	2年前
Observer	checkin	2年前
Setup/Patch/Data	checkin	2年前
Test	checkin	2年前
etc	checkin	2年前
i18n	checkin	2年前
view	checkin	2年前
LICENSE.txt	checkin	2年前
LICENSE_AFL.txt	checkin	2年前
README.md	checkin	2年前
composer.json	checkin	2年前
registration.php	checkin	2年前

Security

Security management module Main features:

Added support for simultaneous admin user logins with ability to enable/disable the feature, review and disconnect the list of current logged in sessions
Added password complexity configuration
Enhanced security to prevent account takeover for sessions opened on public computers and similar:
- Password confirmation for all critical flows (like password, email change)
- Lockout of the account after a configurable amount of incorrect login/password entries
- Password Change functionality is enhanced by email and/or ip address by frequency, number and requests per hour limitation
- Change password link becomes invalid after the first use or after a configurable amount of time
- Password/email change notifications are sent to both old and new email addresses
Fixed: the password is not being reset until the new password is submitted via the form available by a one time link sent to the email address