Skip to content

Commit

Permalink
Update note_admin-3.0.0.md (#1989)
Browse files Browse the repository at this point in the history
  • Loading branch information
rolandschaub authored Feb 19, 2020
1 parent 4a712a0 commit 5f94f2f
Showing 1 changed file with 14 additions and 14 deletions.
28 changes: 14 additions & 14 deletions docs/releases/note_admin-3.0.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,40 +2,40 @@

LUYA admin 3.0.0 release

## 2FA with OTP Option
## Two-Factor Authentication with OTP (One-Time Password)

![LUYA 2FA](https://raw.githubusercontent.com/luyadev/luya/master/docs/guide/img/2fa.png)

Yes! You can now setup 2 factor authentication for your account without the need of sending tokens by email. If email secure login is setup, but users choose to use the OTP 2fa way, no email with a token will be sent. There is not more to say on this.
You can now set up two-factor authentication for your account, rendering the need to send access tokens by email unnecessary. If secure login is set up, no access tokens will be sent to users with active two-factor authentication and OTP.

## Remember Device

![LUYA Devices](https://raw.githubusercontent.com/luyadev/luya/master/docs/guide/img/devices.png)

With version 3.0 its now possible to remeber a certain devices for a given amount of days. This means if the *remember this device* checkbox has been toggle during login process, you will be auto logged in for a certain amount of days on this device without asking for password or email. If you idle for to long and the admin kicks you off, the cookie with this information will be destroyed and the device will be removed from the list againi. So don't fall asleep while typing. To understand how this works, the LUYA admin will stored an device specific unique token in a cookie that will be retreived when open the admin ui.
With version 3.0 it is now possible to remember devices: If the *remember this device* checkbox is ticked on login, you will be logged in automatically for a certain amount of days on this device without being asked for a password or access token. How does this work? LUYA will store a device-specific unique token in a cookie that will be retrieved when accessing the admin ui. If you are inactive for too long and the admin logs you out, the cookie with this information will be destroyed and the device will be removed from the list of remembered devices. So better don't fall asleep while typing. ;-)

## New Account View
## Updated Account View

![LUYA Account overhaul](https://raw.githubusercontent.com/luyadev/luya/master/docs/guide/img/account.png)

The account view recieved a small overhaul with accordions, an element which is widely used in the admin ui (its an angularjs directive called ` <collapse-container title="Advanced Settings">Content</collapse-container>` you can use it everywhere in your custom luya code.).
The account view received a small overhaul with accordions, an element widely used in the admin ui (it's an AngularJS directive that you can use everywhere in your custom LUYA code: `<collapse-container title="Advanced Settings">Content</collapse-container>`).

## Queue Errors
## Improved Queue Errors

The integration with Yii Queue gets even deeper. Exceptions which are thrown while queue run are now logged for each retry. Even the job was successfull at the end, all thrown exceptions and error will be stored and are visible. This makes it more easy to debug queue jobs.
The integration with Yii Queue gets even deeper: Exceptions thrown while the queue is running are now logged for each retry. Even when a job is finished successfully in the end, all exceptions and errors thrown while processing the job are stored and visible. This makes it much easier to debug queue jobs!

## "Forgot your password?"
## "Forgot Your Password?"

![LUYA Account overhaul](https://raw.githubusercontent.com/luyadev/luya/master/docs/guide/img/reset-password.png)

A new button "forgot your password" has been added to the login screen, only if enabled in the admin module configuration. By default its disabled due to a small security risk. In order to enable the new option set LUYA admin module propety `$resetPassword` to true.
Finally! A new button "Forgot Your Password?" is added to the login screen when enabled in the admin module configuration. By default it is disabled due to a small security risk. In order to enable the new option, set the LUYA admin module property `$resetPassword` to true.

ps: if you like to have a random background image in the back of the login screen, just install the login image extension https://luya.io/packages/nadar--luya-login-image.
By the way, if you would like to have a random image as a background of the login screen, simply install the login image extension https://luya.io/packages/nadar--luya-login-image.

## Session based lockout is now IP based lockout
## Session Based Lockout Is Now IP Based Lockout

In the previous version we have integrated a session based lockout. If you where attempting to login for a certain amount your session profile have been locked out. As its easy to clear session date, we have now implemented an ip based lockout. Its also possible to switch ips but its better then session based lockout. If brute forcing is the method of attack, and the mail adresse has been breached, the email based lockout will step into action anyhow.
In the previous version of the LUYA admin we had integrated a session based lockout: If you failed to login a certain amount of tries, your session profile was locked out. As it is rather easy to clear session data, we have now implemented an IP based lockout. While it would still be possible to switch IPs, this method is preferred to session based lockout. In case of a brute-force attack and a breach of the email address, the email based lockout will take effect.

Please check the full [Changelog](https://github.com/luyadev/luya-module-admin/blob/master/CHANGELOG.md) and the [Upgrading Guide](https://github.com/luyadev/luya-module-admin/blob/master/UPGRADE.md) where you will find a list of all breaking changes.
Please check the full [Changelog](https://github.com/luyadev/luya-module-admin/blob/master/CHANGELOG.md) and the [Upgrading Guide](https://github.com/luyadev/luya-module-admin/blob/master/UPGRADE.md) where you will find a list of breaking changes.

February 2020, LUYA developer team
February 2020, LUYA developer team

0 comments on commit 5f94f2f

Please sign in to comment.