Support/Comments for Login 1.5.0-pl

This is an auto-generated topic for Login 1.5.0-pl by splittingred.


This is a mandatory security update for anyone using Login!

Brief Description:

Loads a simple login/logout form, with password retrieval functionality and a register form snippet.
New in 1.5.0

• Fixed security vulnerability
• Added authenticate and authenticateContexts to ConfirmRegister to allow for authentication after confirming registration
• Fixed persisting request alias params issue in ConfirmRegister
• [[#15]] Added ability to assign roles when using &usergroups in Register, ie: &usergroups=`my-group-name:Member`
• Added math hook to Register, allowing anti-spam math field measure
• Added fix to allow overriding of class_key for new users in Register

New in 1.4.0

• Added redirectBack to Register, Login and ConfirmRegister that allows dynamic redirection handling for other forms needing login/registration
• Added redirectTo, redirectParams to ConfirmRegister that will redirect after successful confirmation
• Added persistParams to Register snippet, useful for shopping cart implementations to persist parameters across the registration process
• [[#27]] Fixed issue with activationEmail always overriding normal email
• [[#27]] Fixed issue with activationEmail always overriding normal email
• [[#29]] Added loginResourceParams, logoutResourceParams, which allows attaching REQUEST parameters to login/logout redirection URLs
• [[#26]],[[#14]] Added activationEmail property for better handling of middle men in activation steps
• Added changelog to build

See the Official Documentation here:
http://rftm.modx.com/display/ADDON/Login

Is this supposed to log you in to the Manager? The behavior I’m seeing is that I get authenticated somewhat correctly although if I try to access the Manager, I’m prompted to authenticate again. Advice?

No, it’s *definitely* not supposed to log you into the manager.

What is the difference between Login and the standard manager login?

Do you know how I might wrap the full manager authentication using chunks similar to how Login does? Thanks!

The manager login form log you in the mgr context.
The Login snippet logs you in your current context (default: web -> see the tree root in the manager).

The Login snippet use the same php processor as the manager login form to authenticate you (input hidden -> service = login/logout).

Thanks! Looking into the snippet this is what I saw too. Maybe I can just hack it to add the Manager context??

Yuuuup, pretty simple, just had to play with the context vars in the snippet....

:D