Skip to content

Boilerplate default member access rules for Silverstripe websites - including password, MFA and pending profiles

License

Notifications You must be signed in to change notification settings

nswdpc/silverstripe-authentication-boilerplate

Silverstripe Authentication Boilerplate

This module provides a standard set of rules for defining access to Silverstripe sites:

  • password validation configuration per NIST standards
  • password handling and management
  • password checking via pwnedpasswords API
  • multi-factor authentication setup (MFA)
  • security reports
  • pending profiles

See composer.json for details

Configuration

See _config/config.yml

More: Multi Factor Authentication

Good-to-know

Password validator

Setting a PasswordValidator in project configuration will replace the password validator provided by this module:

$validator = \My\Own\PasswordValidator::create();
\SilverStripe\Security\Member::set_password_validator($validator);

License

BSD-3-Clause

Documentation

Maintainers

PD web team

Bugtracker

We welcome bug reports, pull requests and feature requests on the Github Issue tracker for this project.

Please review the code of conduct prior to opening a new issue.

Development and contribution

If you would like to make contributions to the module please ensure you raise a pull request and discuss with the module maintainers.

Please review the code of conduct prior to completing a pull request.

About

Boilerplate default member access rules for Silverstripe websites - including password, MFA and pending profiles

Resources

License

Code of conduct

Stars

Watchers

Forks

Packages

No packages published