Skip to content

v0.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Apr 08:43
v0.7.0
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: BsdGvKi3Med56Wy4VisZQhWin20c4hORHHUxNM9bVlw
Verified
Learn about vigilant mode.
017125c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new in 0.7.0

This release focuses on admin UX and onboarding guidance, making the Passkey Management module more helpful and discoverable — especially for first-time setup.

Dashboard improvements

  • Quick Start guide — When no passkeys are registered yet, the Dashboard shows a step-by-step setup card: review extension settings, register your own passkey, enable enforcement for a pilot group, and a link to the Help tab for the full rollout guide. Auto-detected rpId is displayed for transparency.
  • Adoption badges — Gamification for passkey rollout progress. The Dashboard shows a tier badge next to the adoption rate: Getting started (<25%), Bronze (25%+), Silver (50%+), Gold (75%+), Platinum (100%). Badge labels are translatable.
  • MFA hint — When users have registered passkeys, an info box explains that passkeys are inherently multi-factor (device + biometric/PIN) and that additional TOTP/MFA is redundant for most threat models.
  • Configuration hints — Warns when both rpId and origin are auto-detected, suggesting explicit configuration for production environments.

Help page & documentation

  • Help button in DocHeader — A question-mark icon button is now visible in the module header bar (via TYPO3's ButtonBar API), so the Help tab is discoverable without opening the dropdown menu.
  • Enhanced MFA section — Renamed to "Passkeys & MFA (two-factor authentication)" with a prominent infobox answering "Are passkeys secure enough without additional MFA?" and specific criteria for when to keep MFA enabled.
  • README — Added Quick Start section with 5 post-installation steps, Passkeys & MFA guidance, TER documentation link, and rpId/rpName/origin in the configuration table.

Cross-version compatibility

  • All f:be.infobox calls use InfoboxViewHelper::STATE_* integer constants (works on v12/v13/v14) instead of ContextualFeedbackSeverity enum (which is only accepted as infobox state in v14).
  • IconSize enum (v13+) handled via enum_exists() runtime check with string fallback for v12.
  • Badge CSS classes use badge-* (TYPO3 convention) instead of Bootstrap 5 text-bg-*.

Test suite

  • 556 tests (+10), 1,801 assertions
  • 10 new adoption badge tier tests via data provider covering all thresholds with boundary values

Full Changelog: https://github.com/netresearch/t3x-nr-passkeys-be/blob/v0.7.0/Documentation/Changelog/Index.rst

Assets 12
Loading