Changes for page Authentication API

Summary

• Objects (1 modified, 0 added, 0 removed)
  • ExtensionCode.ExtensionClass[0]

Details

ExtensionCode.ExtensionClass[0]

Description

...	...	@@ -6,10 +6,15 @@
6	6	The configuration of a the module allows to setup three information:
7	7	* the authentication failure strategies (default is CAPTCHA)
8	8	* the maximum number of failing login attempts authorized before activating a strategy (default is 3)
9		- * the time window during which those attempts should occur (default is 3 minutes)
	9	+ * the time window during which those attempts should occur (default is 5 minutes)
10	10
11	11	Setting no strategy or 0 to the maximum number of attempts, or to the time window will disable the feature.
	12	+This configuration is available in the Administration > Authentication page by default.
12	12
	14	+{{gallery}}
	15	+image:authentication-security-administration.png
	16	+{{/gallery}}
	17	+
13	13	= Authentication Failure Manager =
14	14
15	15	This component is responsible to record the authentication failures, and to trigger the strategies based on the given configuration.
...	...	@@ -22,10 +22,18 @@
22	22
23	23	This is the default strategy. When a user reached the limit number of authentication attempts, a CAPTCHA is displayed in the login page, and the user have to solve it in order to be login.
24	24
	30	+{{gallery}}
	31	+image:authentication-captcha.png
	32	+{{/gallery}}
	33	+
25	25	== Disable Account ==
26	26
27	27	This strategy will automatically [[disable the user account>>xwiki:Documentation.AdminGuide.User Management||anchor="HEnable%2FDisableUserAccount"]] in case of repeated authentication failure. In that case he needs to contact an administrator of the wiki to enable it back.
28	28
	38	+{{gallery}}
	39	+image:account-disabled-warning.png
	40	+{{/gallery}}
	41	+
29	29	= Events =
30	30
31	31	Two new events are provided: