Feature: #88110 - Felogin extbase password recovery

See Issue #88110

Description

As part of the felogin extbase plugin, a password recovery form has been added.

FE users are able to request a password change via email. A mail with a forgot hash will be send to the requesting user. If that hash is found valid a form reset password form is shown. If all validators are met the users password will be updated.

There is a way to define and override default validators. Configured as default are two validators: NotEmptyValidator and StringLengthValidator.

They can be overridden by overwriting plugin.tx_felogin_login.settings.passwordValidators. Default is as follows:

passwordValidators {
   10 = TYPO3\CMS\Extbase\Validation\Validator\NotEmptyValidator
   20 {
      className = TYPO3\CMS\Extbase\Validation\Validator\StringLengthValidator
      options {
         minimum = {$styles.content.loginform.newPasswordMinLength}
      }
   }
}

A custom configuration can look like this:

passwordValidators {
   10 = TYPO3\CMS\Extbase\Validation\Validator\AlphanumericValidator
   20 {
      className = TYPO3\CMS\Extbase\Validation\Validator\StringLengthValidator
      options {
         minimum = {$styles.content.loginform.newPasswordMinLength}
         maximum = 32
      }
   }
   30 = \Vendor\MyExt\Validation\Validator\MyCustomPasswordPolicyValidator
}

Impact

No direct impact. Only used, if feature toggle “felogin.extbase” is explicitly turned on.