Andy Miller
0f05d065b0
Support for YubiKey OTP 2 factor authenticator
2022-01-11 12:00:10 -07:00
Matias Griese
aa4f80eec1
Greatly improve login related actions for Admin
...
* Better isolate admin to prevent session related vulnerabilities
* Removed support for custom login redirects for improved security
* Shorten forgot password link lifetime from 7 days to 1 hour
* Fixed login related pages being accessible from admin when user has logged in
* Fixed admin user creation and password reset allowing unsafe passwords
* Fixed missing validation when registering the first admin user
* Fixed reset password email not to have session specific token in it
2021-03-26 14:39:37 +02:00
Matias Griese
a8983a003d
Fixed ACL for Configuration tabs [ #771 ]
2021-02-10 15:26:02 +02:00
Andy Miller
8f4aca88d7
Merge branch 'develop' into 1.10
...
# Conflicts:
# CHANGELOG.md
# blueprints.yaml
# classes/plugin/Admin.php
# classes/plugin/AdminController.php
# languages/en.yaml
# themes/grav/css-compiled/fonts.css
# themes/grav/css-compiled/fonts.css.map
# themes/grav/css-compiled/template.css
# themes/grav/css-compiled/template.css.map
# themes/grav/js/admin.min.js
# themes/grav/js/vendor.min.js
# themes/grav/scss/fonts.scss
2020-10-07 17:35:49 -06:00
Matias Griese
8b6679855c
Fixed proxy/browser caching issues in admin pages
2020-09-14 13:46:59 +03:00
Matias Griese
146411dd1d
ACL access updates
2020-02-03 13:52:58 +02:00
Andy Miller
63d39e7109
initial changelog work
2019-12-05 15:26:34 -07:00
Andy Miller
d3ffb5bba7
Enable redirect back to login if not logged in
2019-02-21 20:39:07 -07:00
Andy Miller
536898f41b
Improved tools permissions handling
2019-02-08 13:53:11 -07:00
Matias Griese
54728c035a
Fixed error page not to be the frontend version
2018-12-10 20:18:30 +02:00
Matias Griese
41565f83d9
Admin login now uses login plugin events (with option admin: true)
2018-05-10 20:04:14 +03:00
Andy Miller
116f3609ef
Added new and improved Admin Preview
2018-03-11 15:23:25 -06:00
Andy Miller
1b97769ea5
Logout is one step now
2017-12-01 16:08:52 -07:00
Andy Miller
4dd7135098
Enabled autofocus on 2fa code field
2017-08-26 19:19:40 -06:00
Andy Miller
3465b41e63
more 2fa visual tweaks
2017-08-26 19:15:45 -06:00
Andy Miller
ab3b47db1a
Tweaks to lang
2017-08-26 18:45:35 -06:00
Andy Miller
8ca011dcd6
initial commit at dedicated page
2017-08-26 18:25:34 -06:00
Andy Miller
8658466e8d
two factor authentication essental elements
2017-08-25 16:20:57 -06:00
Andy Miller
46afadf5d4
Use new password and username regex from grav system config
...
# Conflicts:
# CHANGELOG.md
2017-04-14 11:31:19 -06:00
Flavio Copes
c7256134ba
[WORK IN PROGRESS] First draft of a Tools menu with direct install ( #990 )
...
* First draft of a Tools menu with direct install
* Basic styling
* Translate GPM messages
* Basic frontend validation
* Fix form action path
* Added lang strings for offical_gpm_only toggle
2017-02-22 13:34:21 -07:00
Andy Miller
b849f040f1
Moved GPM get updates to standard method
2017-02-16 15:03:30 -07:00
Andy Miller
d3efa4226a
unified JSON twig templates
2016-08-26 14:32:11 -06:00
Flavio Copes
3170b236d0
Fix #739 avoid requiring admin.super for ajax calls
2016-08-22 14:41:00 +02:00
Flavio Copes
988f4a0389
[WIP] Notifications ( #599 )
...
Adds a new notifications feature to the Admin plugin. It will now lookup notifications which are set up on getgrav.org and will inform users, and also alert for new updates and provide awareness on various topics.
Also fixes issue with Array field in `value_only` mode, improperly displaying the key when novalue was set, and fixes issue with drag handlers in Array not showing/hiding properly (#950 )
Updated FontAwesome to 4.6.3
2016-08-11 19:17:02 +02:00
Flavio Copes
64a88c916c
Feature: Ability to Login with Email
...
Thanks to @gsumpster for https://github.com/getgrav/grav-plugin-admin/pull/685
* implemented email-login, close #674
* changed placeholder text
* Fix Utils namespace thing
* Drop use
* Cleanup styling
2016-07-07 18:47:48 +02:00
Flavio Copes
4a5bc4df83
Add maintenance acl to cache clearing
2016-06-13 11:17:02 +02:00
Flavio Copes
33e363affa
Merge pull request #524 from getgrav/feature/show-account-page-for-login-acl
...
Show account page for users with admin.login ACL
2016-04-27 11:48:16 -06:00
Djamil Legato
69459ec611
Fixed toggler for stable/testing channel
2016-04-20 15:59:46 -07:00
Flavio Copes
bc18840a1a
Require login/forgot forms fields so they are validated client-side too
2016-04-08 11:11:10 +02:00
Oliver Stapelfeldt
072b51dea0
Update register.md
2016-03-20 11:54:13 +01:00
Lionel Salabartan
b59b9ea8ad
Use of language strings for placeholder in forms.
2016-03-15 01:02:44 +01:00
Flavio Copes
6ed680109c
Add correct acl setting to config page
2016-01-16 10:33:46 +01:00
Andy Miller
4eded02516
Added access check for config pages
2016-01-15 19:00:30 -07:00
Flavio Copes
8e34aa3c30
Drop old logs code
2016-01-10 18:22:06 +01:00
Flavio Copes
ae1b2a074c
Show any configuration item Grav finds under user/config, if there is an associated blueprint provided
...
Also, organize current system/site/info files under a common
config.html.twig. Delete info/site/system twig files. Preserve BC by
setting the template of system/site/info to "config", in the pages.
2016-01-03 17:53:04 +01:00
Andy Miller
148176c9a7
Just to make Paul happy! :)
2015-12-10 18:36:11 -07:00
Flavio Copes
2996d009a8
Use type email for email, so it validates in the frontend too
2015-12-10 22:21:13 +01:00
Andy Miller
19d73c1fdd
refactor including site-side redirect if no accounts.
2015-12-10 13:22:23 -07:00
Flavio Copes
62820793d0
Add pattern for username. Drop manual validation
2015-12-10 19:34:02 +01:00
Flavio Copes
4c109d002c
Admin registration working
2015-12-10 12:07:36 +01:00
Andy Miller
c1311567b4
more progress with the registration
2015-12-09 21:37:34 -07:00
Andy Miller
03fd601a49
cleaned up the buttons
2015-12-09 18:56:39 -07:00
Andy Miller
3ca0c17f27
slowly prettying up the registration form
2015-12-09 18:07:51 -07:00
Andy Miller
fb30324187
started work on admin registration logic
2015-12-04 11:58:28 -07:00
Andy Miller
065e01926d
updated admin login page
2015-12-04 11:24:30 -07:00
Andy Miller
61f1908750
Added a phpinfo page under configuration
2015-08-11 18:30:27 -06:00
Sommerregen
5a7c07dd89
Fixes #30
2015-08-08 10:51:54 +02:00
Gert
1402e14272
rudimentary backup [ fixes #45 ]
2015-04-27 13:37:22 +02:00
Gert
a2badcbfe8
Hook up page filtering [ fixes #22 ][ fixes #23 ]
2015-04-20 20:41:34 +02:00
Gert
f085f8438b
forgot password [ fixes #28 ]
2015-04-20 16:01:20 +02:00
