WordPress.org
Get WordPress

Plugin Directory

Changeset 3789771


Ignore:
Timestamp:
11/07/2026 02:52:54 PM (less than one hour ago)
Author:
frogerme
Message:

v2.0

Location:
otp-authenticator
Files:
4066 added
10 deleted
2 edited

Legend:

Unmodified
Added
Removed

  • otp-authenticator/trunk

    • Property svn:ignore set to
      deploy.sh
      .DS_Store
      .vscode
      .git
      .gitignore
      tests

  • otp-authenticator/trunk/readme.txt

    r2703819 r3789771  
    33Tags: 2fa, OTP, passwordless login
    44Requires at least: 4.9.5
    5 Tested up to: 5.5
    6 Stable tag: trunk
    7 Requires PHP: 7.0
     5Tested up to: 7.1
     6Stable tag: 2.0
     7Requires PHP: 8.3
    88License: GPLv3
    99License URI: https://www.gnu.org/licenses/gpl-3.0.html
    … …  
    8484== Changelog ==
    8585
     86= 2.0 =
     87* Require PHP 8.3 and declare compatibility with WordPress 7.1
     88* Update the Twilio and Alibaba Cloud SMS libraries through Composer and remove library security warnings
     89* Add a deployment script for creating release packages
     90* Add PHP and browser tests for settings, gateways, passwordless login, two-factor authentication, account validation, and security rules
     91* Restrict Passwordless Authentication to selected WordPress roles and show a clear error when a user's role is not included
     92* Select Subscriber as the default Passwordless Authentication role, restore it when no role remains selected, and allow another role to replace it
     93* Display Two-Factor Authentication switch labels above the button by default and add an option to display them inline
     94* Require server-side permissions for administrative account-validation and two-factor controls
     95* Bind each verification code to one purpose and store simultaneous two-factor, account-validation, and passwordless codes separately
     96* Keep a valid verification code available after an incorrect attempt until it expires or reaches the configured attempt limit
     97* Prevent passwordless requests from revealing codes, changing the selected account, depending on client IP addresses, or being reused by another browser
     98* Restrict every post-authentication redirect to a safe address on the current WordPress site
     99* Require administrator permission and a valid request token before activity logs can be read or erased
     100* Prevent the Ultimate Member integration from creating PHP objects from submitted form data
     101* Keep Two-Factor Authentication switch text as plain text when its state changes
     102* Restore the previous WordPress user after every passwordless request and verification, including unexpected failures
     103* Restrict delivery-address enrollment so an existing address cannot be replaced while authentication is pending
     104* Block protected REST, administration, background, front-end, WooCommerce, and XML-RPC requests until required authentication or validation is complete
     105* Reject the first password-only XML-RPC request for accounts requiring two-factor authentication or account validation
     106* Record request waiting periods only after successful delivery and protect simultaneous requests with an expiring, owner-checked server lock
     107* Correct toolbar visibility, supplied-user checks, request retry behavior, and failed-delivery handling
     108* Correct WordPress email defaults, saved subject handling, and identifier synchronization on the first email change
     109* Correct direct account validation through the public helper function
     110* Add a minimal working custom Authentication Gateway example to the developer documentation
     111* Refresh the translation template with all new interface and error messages
     112* Make every PHP code style exception comment name the exact rule it skips
     113* Improve PHP 8.4 compatibility, WordPress coding-style compliance, input handling, output escaping, documentation, and static-analysis results
     114
    86115= 1.1 =
    87116* Update Alibaba library
Note: See TracChangeset for help on using the changeset viewer.