golem15/sm-user-plugin
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: password-change hook and the reset-2FA admin slot

Browse Source 
The D-07 password-change hook is the existing AccessRevokedEvent, fired
inside the write's transaction by a reset, the user's own change and an
administrator's password; (*AccessRevokedEvent).PasswordChanged reports
those three reasons, and the login rehash fires nothing.

The Users screen declares the record action reset_two_factor (danger)
behind the new permission golem15.users.reset_two_factor, which no role
has by default. It is offered only when a two-factor plugin publishes a
classes.TwoFactorAdmin and the user has a second factor; Run calls the
service's Reset in the action's transaction.
This commit is contained in:
Jakub Zych
2026-10-26 10:03:59 +01:00
parent 8501f3475a
commit 7900f47ba6
14 changed files with 419 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
controllers/users/config_form.yaml
View File

@@ -14,7 +14,7 @@ update:
preview:
headerPartial: hint
recordActions: [activate, unban, unsuspend]
recordActions: [activate, unban, unsuspend, reset_two_factor]
messages:
create: golem15.user::lang.users.new_user