DEPRECATION WARNING

This documentation is not using the current rendering mechanism and is probably outdated. The extension maintainer should switch to the new system. Details on how to use the rendering mechanism can be found here.

Developer Corner

Target group: Developers

Structure

All classes are based on namespaces. So you can’t use this extension on TYPO3 Versions below 6.0.

We register this service with a priority of 80 and a quality of 80. With these values we are higher than the services of felogin, openID and saltedpasswords. So, if IP does not match, we give all the other services a try to login the user.

Example: userA will be logged in to frontend automatically, if he is online with the static IP address from his company. When userA is online at home the IP address will not match, but the userA has still the possibility to login via felogin or similar.

Security

If a user logs in via jwauth, his user session will be deleted after EACH request! So with each request, the user will be logged in again and again. This is for security reasons. Without that part you as an administrator can deactivate jwauth in extension manager, but these users can still browse to your website. In our opinion an administrator must always have the opportunity to deactivate such a feature directly.

It could be that browsing with activated jwauth can slow down your website some milliseconds. That’s because users theirs IP address matches have to process the complete user authentication with each request.