Making the complex simple + Mendix 9 fix
After reviewing and feedback we released 2.0 of the module. Please upgrade to this version!
- When your mark this module as your favorite marketplace content you will receive notifications about new releases.
Breaking change:
- We removed the capability to use MFA from login.html (too complex)
Configuration:
- Remove MFA directory from your resources directory
Improvements:
- For MFA users: Max login attempts and Max MFA attempts can be configured with constants (default is 3)
- For non-MFA user after the default platform attempts of 3 the user will be blocked according to the Mendix platform default and is released after 5 minutes (but read https://docs.mendix.com/refguide/login-behavior)
- Improved logging message when user is blocked (so it's in line with unblocks by the Core runtime)
- Reduced lines of java code
- Added unit tests (if you experience issues, please check if you can create a unit test for the case)
- Removed a HTML snippet and replaced this with a nanoflow + Javascript action
- Create code flow is more fail proof if the custom implementation of creating code was not correct, the flow remains secure (by always setting a random code)
- This Mendix 8.18.8 version of the module is Mendix 9 compatible (BlockSince attribute on User entity fix for Mendix 9 included!)