[SECURITY] Add hook to implement login protection methods
[Packages/TYPO3.CMS.git] / typo3 / sysext / core / Documentation / Changelog / master / Feature-59231-AddHookToAbstractUserAuthenticationCheckAuthentication.rst
1 ============================================================================
2 Feature: #59231 - Hook for AbstractUserAuthentication::checkAuthentication()
3 ============================================================================
4
5 Description
6 ===========
7
8 Hook to post-process login failures in ``AbstractUserAuthentication::checkAuthentication``.
9 By default the process sleeps for five seconds in case of failing. Using this hook
10 different solutions for brute force protection could be implemented.
11
12 Register like this:
13
14 .. code-block:: php
15
16 $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_userauth.php']['postLoginFailureProcessing'][] = 'My\\Package\\HookClass->hookMethod';