[ReauthSettings]
Available since Exponential 6.0.15 (in development, not in a release yet).
Summary
The group [ReauthSettings] of settings/site.ini.
File
settings/site.ini; override it in settings/override/site.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| Reauth | enabled | "Verify it's you": before a sensitive action the signed-in user confirms who they are again (the password and a passkey, see Factors[]) and is not asked again for Minutes. Only the web pages ask (index.php and Velocity); REST, SOAP, WebDAV, the expservices login and the command line are never asked. Anonymous visitors are never asked. The groups and their switches are edited on setup/reauth. Guide: doc/eng-us/guides/verify-its-you.md enabled or disabled (all groups). |
| Minutes | 10 | Minutes a confirmation counts. |
| MaxFailures | 5 | Wrong answers in a row after which the user is signed out. |
| Factors[] | password+passkey; password+code; password; passkey | How the user confirms: the first combination whose every way the user has is asked, with the later ones of as many ways offered beside it (never a weaker one). Ways: password, passkey, code (the authenticator app of a two-step sign-in, see CodeHandlers[]). The default: the password AND a passkey; without a passkey the password and the code; without either the password alone; an account without a password uses a passkey. |
| Groups[] | account; users; system; export; delete; content | The groups, each [ReauthGroup_<name>] with Enabled=true|false and Rules[]. |
| CodeHandlers[] | expReauthTotpCode | Classes implementing expReauthCodeHandler: they check the code of a two-step sign-in app. expReauthTotpCode reads the codes of sevenx_authentication_2fa when that extension is active. |
| TriggerHandlers[] | (empty array) | Classes implementing expReauthTriggerHandler: extensions decide themselves that a request asks, naming one of the groups above (it asks only while that group is on). |
| BulkCount | 2 | The number of items at which a removal counts as "bulk" (the rule token bulk). |
See also
Generated example: site.ini [ReauthSettings]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/site.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment