Project

General

Profile

Actions

Feature #83529

closed

Execute hooks on backend user login

Added by Michael Schams over 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Could have
Assignee:
-
Category:
Authentication
Target version:
-
Start date:
2018-01-10
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
easy
Sprint Focus:

Description

When a user successfully logs in to the backend of TYPO3, registered hooks should be executed.

This allows TYPO3 core developers as well as extension developers to create functions that react on a BE user login.
Typical use cases for notification services are for example:

  • Post a message to Slack or a similar messaging system.
  • Send a text message (SMS) to the user's mobile number.
  • Pass this event to other systems to monitor suspicious activities.
  • Pass this event to other systems for activity logging of specific users (see note below).
  • Trigger other events in the system based on the user, user settings, etc.
  • etc.

Note: Some organization/company policies require the governance, compliance, operational auditing, and risk auditing of specific account (e.g. accounts with high privileges such as admins). Developing an extension that notifies a third party system (e.g. via an API call) about the BE login event in real time would be an easy task if a hook would be available.

Currently, backend users can enable the feature "email at login" in their settings. This could be decentralized and moved to a separate extension (or system extension), including some improvements (e.g. generate a nicer HTML email or customize the mail text such as "take the HTTP X-FORWARDED-FOR header into account", etc.). However, I suggest to treat this as a separate task, independent from this feature request.

Actions

Also available in: Atom PDF