[TASK] Set 'loginSecurityLevel' to normal by default 72/60972/5
authorBenni Mack <benni@typo3.org>
Wed, 12 Jun 2019 20:19:37 +0000 (22:19 +0200)
committerGeorg Ringer <georg.ringer@gmail.com>
Thu, 13 Jun 2019 06:05:59 +0000 (08:05 +0200)
commite9d6db230e3dc3744123061462815977a441cf30
tree0dba98aa90b46954663a03014ed95e4df545318d
parent166cbdf006d9ef23aefa5f05b00ab09876cb90e7
[TASK] Set 'loginSecurityLevel' to normal by default

The only occurrence for 'loginSecurityLevel' checks for empty and falls back
to 'normal' (also defined in #81852 this must be set to normal).

Single usage in AbstractUserAuthentication:
trim($GLOBALS['TYPO3_CONF_VARS'][$this->loginType]['loginSecurityLevel']) ?: 'normal';

Instead of having this set to "factory configuration", (= writing to
LocalConfiguration.php on new installation), this can be set to 'normal'
in DefaultConfiguration directly.

EXT:rsaauth can be configured to set this to "rsa" in an instance
with RSA enabled (and has already done so before).

The main benefit is that this option (if set to "normal") can be
removed from LocalConfiguration if set to "normal" as it is then
taken from DefaultConfiguration.php

Resolves: #88549
Releases: master
Change-Id: I2f8c088230b334a03c5acf9d09721dd42e67c059
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60972
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Georg Ringer <georg.ringer@gmail.com>
Reviewed-by: Markus Klein <markus.klein@typo3.org>
Reviewed-by: Georg Ringer <georg.ringer@gmail.com>
typo3/sysext/core/Configuration/DefaultConfiguration.php
typo3/sysext/core/Configuration/FactoryConfiguration.php