[FEATURE] Make it possible to skip updating the lastSuccessfulAuthentication date via configuration of providerOptions

Author: bweinzierl

Classes/Authentication/UsernameHmacTimestampProvider.php

@@ -149,9 +149,13 @@ public function authenticate(TokenInterface $authenticationToken)
         }
 
         if ($isHmacTokenValid) {
-            $account->authenticationAttempted(TokenInterface::AUTHENTICATION_SUCCESSFUL);
+            if (!isset($this->options['trackAuthenticationAttempts']) || $this->options['trackAuthenticationAttempts'] === true || $this->options['trackAuthenticationAttempts'] === 'successful') {
+                $account->authenticationAttempted(TokenInterface::AUTHENTICATION_SUCCESSFUL);
+            }
             $authenticationToken->setAuthenticationStatus(TokenInterface::AUTHENTICATION_SUCCESSFUL);
             $authenticationToken->setAccount($account);
+        } else if (!isset($this->options['trackAuthenticationAttempts']) || $this->options['trackAuthenticationAttempts'] === true || $this->options['trackAuthenticationAttempts'] === 'failed') {
+            $account->authenticationAttempted(TokenInterface::WRONG_CREDENTIALS);
         }
 
         $this->accountRepository->update($account);

README.md

@@ -40,6 +40,8 @@ Neos:
             providerOptions:
               # For an account with this authentication provider name will be searched:
               mainAuthenticationProviderName: 'My.Website:FrontendLoginProvider'
+              # optionally only track failed authentication attempts (possible values: 'failed', 'successful', true)
+              #trackAuthenticationAttempts: 'failed'
             entryPoint: 'WebRedirect'
             entryPointOptions:
               routeValues: