Autologin

Changed

• Require Verbb Base 3.0.20 or later so shared control-panel layouts use the current asset bundle namespace. (verbb-base#3)

Fixed

• Fixed a low-severity improper restriction of excessive authentication attempts vulnerability.

Changed

• Updated the required version of verbb/base to 3.0.19.

Fixed

• Fixed a medium-severity authentication bypass vulnerability.

Changed

• Require a server-authenticated identity for Basic Auth mappings, use direct connection addresses for IP mappings, and require explicit assurance before automatic login can bypass Craft two-step verification.
• Route settings updates through Autologin’s authorized settings controller.
• Restrict control panel settings access and updates to administrators, respecting the allowAdminChanges configuration setting.

Fixed

• Fixed a high-severity authentication bypass vulnerability.
• Prevent automatic login while disabled and for non-active or locked Craft accounts.

Changed

• Updated documentation for clearer, more consistent guidance.

Changed

• Normalize plugin settings.

Added

• Add control panel settings page to manage plugin settings.

Changed

• Update English translations.

Changed

• Now requires PHP 8.2.0+.
• Now requires Craft 5.0.0+.

Changed

• Update English translations.
• Remove unneeded defineRules().
• Craft 4 updates.

Changed

• Now requires PHP 8.0.2+.
• Now requires Craft 4.0.0+.

Fixed

• Fix an error when using basicAuth.

Fixed

• Fix redirecting to the control panel.
• Fix an error with getUserByUsernameOrEmail().

The plugin’s package name has changed to verbb/autologin. Autologin will need be updated to 2.0 from a terminal, by running composer require verbb/autologin && composer remove superbig/craft3-autologin.

Changed

• Migration to verbb/autologin.
• Now requires Craft 3.7+.

Added

• Initial release