[BUGFIX] Add webhook message for failed mfa attempts
In case a user did not pass necessary multi-factor authentication, this is handled as a login failure. Therefore, a webhook is now triggered for this scenario, like done for login failures of the first factor (usually username / password), providing basic information about the user and the used MFA provider. Resolves: #101263 Related: #100129 Releases: main, 12.4 Change-Id: I56b79a74d291beb94d78bb42305dcfba86ecaa26 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/79825 Tested-by:Oliver Bartsch <bo@cedev.de> Tested-by:
core-ci <typo3@b13.com> Tested-by:
Benjamin Franzke <ben@bnf.dev> Reviewed-by:
Oliver Bartsch <bo@cedev.de> Reviewed-by:
Benjamin Franzke <ben@bnf.dev>
Showing
- typo3/sysext/backend/Classes/Controller/MfaController.php 1 addition, 1 deletiontypo3/sysext/backend/Classes/Controller/MfaController.php
- typo3/sysext/core/Classes/Authentication/Event/MfaVerificationFailedEvent.php 8 additions, 1 deletion...asses/Authentication/Event/MfaVerificationFailedEvent.php
- typo3/sysext/webhooks/Classes/Message/MfaVerificationErrorOccurredMessage.php 67 additions, 0 deletions...s/Classes/Message/MfaVerificationErrorOccurredMessage.php
- typo3/sysext/webhooks/Resources/Private/Language/locallang_db.xlf 3 additions, 0 deletions...sext/webhooks/Resources/Private/Language/locallang_db.xlf
Please register or sign in to comment