Version upped

fix wrong logical check

Version upped

Allow token based logins without 2fa for automated access

By default token auth accesses to the API are now always allowed without
2fa. If you need automated access to other endpoints (like a script

Allow token based logins without 2fa for automated access

By default token auth accesses to the API are now always allowed without
2fa. If you need automated access to other endpoints (like a script
provided by a plugin) an option enables that.

show more ...

Version upped

add missing config metadata

Version upped

allow to skip 2fa for trusted IP addresses

Version upped

avoid rogue 2fa code generations

When a wiki uses rewriting, non-existing files are mapped to doku.php
and interpreted as page names. When using a 2fa provider that transmits
codes (like email) this

avoid rogue 2fa code generations

When a wiki uses rewriting, non-existing files are mapped to doku.php
and interpreted as page names. When using a 2fa provider that transmits
codes (like email) this could lead to sending multiple codes out for
each of these bogus requests. This patch ensures that the 2fa form (and
code sending) is only triggered for document requests as indicated by
the sec-fetch-dest request header.

show more ...

protect password reset with 2fa

This needed some internal changes, because now 2fa data needs to be
checked for a user that is not logged in. Providers may need adjustments
if they access user data.

protect password reset with 2fa

This needed some internal changes, because now 2fa data needs to be
checked for a user that is not logged in. Providers may need adjustments
if they access user data. They should use the getUserData() method of
the abstract Provider class to do so.

show more ...

Version upped

Add "useinternaluid" option

Version upped

fix error message in admin interface

Version upped

Update mandatory.txt

Fix tiny typo

Version upped

Properly handle optional 2fa

Having twofactor enabled but no configured providers broke
authentication in some cases

Fixes #1

upped version

fix search initiated from paginated view

add deleted files

remove unused properties

filter case insensitive in user list

do not access attribute plugin directly

We always want to use the Settings class to be able to replace the
attribute plugin in the future.