⚲

Project

General

Profile

Sign in

Home
Projects
Help

Search:

TYPO3 Core

TYPO3 Core

Overview
Activity
Roadmap
Issues
Repository

Custom queries

12 LTS
Accessibility
Dashboard issues
Easy tasks
Extbase Issues
FAL Issues
FAL Sprint 2023
Hierarchical Issues
Issues reported for v11
JavaScript issues
JavaScript Issues (w/o Epics/Stories)
Most wanted Bugfixes
Most wanted Features
My open issues
New & Unassigned
No feedback within 90 days
Open Bugs
Open issues of 10
Page Tree Regressions after 2020-07-28
Recently modified
Regressions
Stabilization Issues
Usability or UX

Watchers (4)

Andre Koller
Markus Goldbach
Rafal Brzeski
Timo Webler

Actions

Feature #80793

closed

provide configurable password policies

Added by Anja Leichsenring about 7 years ago. Updated over 1 year ago.

Status:

Closed

Priority:

Should have

Assignee:

-

Category:

Security

Target version:

-

Start date:

2017-04-10

Due date:

% Done:

0%

Estimated time:

PHP Version:

Tags:

Complexity:

Sprint Focus:

Description

Admins should be able to define a password policy to follow by all users of the system.

Related issues 10 (1 open — 9 closed)

Related to TYPO3 Core - Feature #59073: [BE] Ask for password-change on next login

Rejected

2014-05-24

Related to TYPO3 Core - Bug #56004: Retain username when entering an insecure password

Closed

2014-02-16

Related to TYPO3 Core - Feature #21659: Introduce Password Policies

Closed

2009-11-24

Related to TYPO3 Core - Feature #59074: [FE] Ask for password-change on next login

Rejected

2014-05-24

Related to TYPO3 Core - Feature #78928: Password Recovery for Backend User

Closed

2016-12-09

Related to TYPO3 Core - Feature #51479: Show somehow which user passwords are treatend as unsecure.

Closed

2013-08-28

Related to TYPO3 Core - Feature #37800: felogin password policy hook

Closed

2012-06-06

Related to TYPO3 Core - Epic #84262: [FEATURE] Update felogin to extbase

Closed

2013-08-16

Related to TYPO3 Core - Epic #97387: Configurable Password Policies

Under Review

2022-04-15

Related to TYPO3 Core - Task #99349: Use the new password policies in setupDatabaseService

Closed

2022-12-12

Issue # Delay: days Cancel

History
Notes
Property changes

Actions

#1

Updated by Riccardo De Contardi about 7 years ago

Related to Feature #59073: [BE] Ask for password-change on next login added

Actions

#2

Updated by Riccardo De Contardi about 7 years ago

Related to Bug #56004: Retain username when entering an insecure password added

Actions

#3

Updated by Riccardo De Contardi about 7 years ago

Related to Feature #21659: Introduce Password Policies added

Actions

#4

Updated by Riccardo De Contardi about 7 years ago

Related to Feature #59074: [FE] Ask for password-change on next login added

Actions

#6

Updated by Riccardo De Contardi about 7 years ago

Related to Feature #69190: Add password generator "wizard" added

Actions

#7

Updated by Riccardo De Contardi about 7 years ago

Related to Feature #78928: Password Recovery for Backend User added

Actions

#8

Updated by Riccardo De Contardi almost 7 years ago

Related to Feature #51479: Show somehow which user passwords are treatend as unsecure. added

Actions

#9

Updated by Jigal van Hemert over 6 years ago

There are already a couple of extensions that implement this annoying behavior. Perhaps it's better to look for a library that can really calculate the strength of a password/passphrase and show that next to the field with the new password. If that works correctly it might be useful to have a setting for the minimum acceptable strength.

Actions

#10

Updated by Susanne Moog about 6 years ago

Target version deleted (~~9.0~~)

Actions

#11

Updated by Stephan Großberndt about 5 years ago

Related to Feature #37800: felogin password policy hook added

Actions

#12

Updated by Oliver Hader about 5 years ago

Related to Feature #87299: Enhance password handling and two-factor authentication added

Actions

#13

Updated by Stephan Großberndt about 5 years ago

Related to Epic #84262: [FEATURE] Update felogin to extbase added

Actions

#14

Updated by Oliver Hader almost 5 years ago

Category set to Security

Actions

#15

Updated by Benni Mack about 4 years ago

Category changed from Security to Miscellaneous

Hey Anja,

I consulted with the security team, and we decided that this won't go into TYPO3 Core, but rather be a standalone extension (as there are multiple extensions out there already). This isn't part of the BSI requirement anymore, and thus does not need to be part of TYPO3 Core.

Actions

#16

Updated by Benni Mack about 4 years ago

Status changed from New to On Hold

Actions

#17

Updated by Torben Hansen about 2 years ago

Related to Epic #97387: Configurable Password Policies added

Actions

#18

Updated by Oliver Hader over 1 year ago

Related to deleted (Feature #87299: Enhance password handling and two-factor authentication)

Actions

#19

Updated by Oliver Hader over 1 year ago

Status changed from On Hold to New

Actions

#20

Updated by Oliver Hader over 1 year ago

Related to deleted (Feature #69190: Add password generator "wizard")

Actions

#21

Updated by Oliver Hader over 1 year ago

Blocked by deleted (Feature #80792: Password strength meter for BE Login)

Actions

#22

Updated by Oliver Hader over 1 year ago

Category changed from Miscellaneous to Security

Actions

#23

Updated by Oliver Hader over 1 year ago

Related to deleted (Epic #97387: Configurable Password Policies)

Actions

#24

Updated by Oliver Hader over 1 year ago

Status changed from New to Closed

→ continue at #97387 for TYPO3 v12

Actions

#25

Updated by Oliver Hader over 1 year ago

Related to Epic #97387: Configurable Password Policies added

Actions

#26

Updated by Jochen Roth over 1 year ago

Related to Task #99349: Use the new password policies in setupDatabaseService added

Actions

Also available in: Atom PDF

Powered by Redmine © 2006-2024 Jean-Philippe Lang

Loading...

TYPO3: Legal Notice | Privacy Policy | Code of Conduct