Nemcio/Grav-Admin-Plugin
1
0
Fork 0
mirror of https://github.com/getgrav/grav-plugin-admin.git synced 2025-10-26 07:46:31 +01:00
Code Issues Packages Projects Releases Activity
Files
1e14c47d28e16697b78ae1ec41104c82780ceb8b
Grav-Admin-Plugin/pages/admin/reset.md
Matias Griese aa4f80eec1 Greatly improve login related actions for Admin 
* Better isolate admin to prevent session related vulnerabilities
* Removed support for custom login redirects for improved security
* Shorten forgot password link lifetime from 7 days to 1 hour
* Fixed login related pages being accessible from admin when user has logged in
* Fixed admin user creation and password reset allowing unsafe passwords
* Fixed missing validation when registering the first admin user
* Fixed reset password email not to have session specific token in it
2021-03-26 14:39:37 +02:00

387 B
Raw Blame History

title, expires, access, forms
title expires access forms
Reset password 0
admin.login
false
admin-login-reset
type method fields
admin post
username password token
type placeholder readonly
text PLUGIN_ADMIN.USERNAME true
type placeholder autofocus
password PLUGIN_ADMIN.PASSWORD true
type
hidden