Version 3.7 of the User plugin is now available, focused on giving site owners more control over how new users come on board, whether through the browser or a headless API.
Admin Approval and Activation Policies
Registration can now require sign-off before a user gets in. Two independent checkboxes in the settings area let you require email confirmation, admin approval, or both. These policies are enforced at sign-in, so they apply everywhere, including API logins. Administrators can approve users individually from the user preview page or in bulk from the list, and pending users see a clear message on the frontend explaining why they are waiting.
Import and Export Users
Users can be imported and exported from the admin panel, found under the new Manage toolbar on the Users page. Imports support matching by email to update existing users, automatic group creation, and group assignments. Exports never include password hashes or secrets.
Headless Workflows with ActionManager
Every user workflow, such as registration, sign-in, password recovery and profile updates, is now available through a single ActionManager class, making it possible to build REST or GraphQL endpoints without duplicating component logic (thanks @xmelic8 for the suggestion). Password reset and verification emails can point to external app URLs, and all the usual events keep firing.
ActionManager::instance()->registerUser([
'first_name' => 'Some',
'email' => 'some@website.tld',
'password' => 'ChangeMe888',
]);See the new Action Manager page in the plugin documentation for the full reference.
Also in this release
- The
redirectproperty returns to the Authentication and Registration components - New
rainlab.user.seenevent fires when a user comes online - Tailor user fields now respect the
tabandspanproperties - Completing a password reset from an email link now verifies the email address
Existing sites are unaffected on upgrade, both activation policies default to off and the migration runs automatically.
