Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add config to limit concurrent logins #14967

Merged

Conversation

bergmania
Copy link
Member

Description

This adds new configuration that limits concurrent logins.

  • Umbraco:CMS:Security:AllowConcurrentLogins

The value will be true for existing projects but false on new projects. We expect to change this so it defaults to false for v13, because this is breaking

Tests

  • AllowConcurrentLogins == true

    • Ensure you still concurrently can sign in from two different browsers
  • AllowConcurrentLogins == false

    • Ensure you are signed out from the old browser, when signing in on a new (at most 30 sec wait)

@elit0451 elit0451 merged commit 0a8b127 into v12/dev Oct 17, 2023
15 of 16 checks passed
@elit0451 elit0451 deleted the v12/feature/add-config-for-concurrent-logins-allowed branch October 17, 2023 08:23
elit0451 added a commit that referenced this pull request Oct 17, 2023
* Add new config options

* Change validation interval + related changes

* Fix typo

* Temp fix

* Set new setting to false for new dotnet projects

* Added logic to update security stamp on sign in + fixed wierd code calling handle signIn twice

* Cleanup

* Adding empty ctors

---------

Co-authored-by: Elitsa <elm@umbraco.dk>
Zeegaan pushed a commit that referenced this pull request Oct 17, 2023
* Add config to limit concurrent logins (#14967)

* Add new config options

* Change validation interval + related changes

* Fix typo

* Temp fix

* Set new setting to false for new dotnet projects

* Added logic to update security stamp on sign in + fixed wierd code calling handle signIn twice

* Cleanup

* Adding empty ctors

---------

Co-authored-by: Elitsa <elm@umbraco.dk>

* Set default setting to false + remove it from templates

---------

Co-authored-by: Bjarke Berg <mail@bergmania.dk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants