Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] protect login page #81

Open
3GDXC opened this issue Sep 9, 2020 · 1 comment
Open

[Feature] protect login page #81

3GDXC opened this issue Sep 9, 2020 · 1 comment
Labels
enhancement New feature or request

Comments

@3GDXC
Copy link

3GDXC commented Sep 9, 2020

it would be good if you could change/protect/hide the login page via a configuration option; without the need to change source.
IMHO this is something needed for security; maybe event placing the page behind a secured ASP.NET authenticated area could be an option have a user given TWO usernames/passwords ?

@3GDXC 3GDXC added the enhancement New feature or request label Sep 9, 2020
@jakubmisek
Copy link
Collaborator

That is a nice feature. Currently, you can protect the wp-login.php page with ASP.NET Core Authentication services and authentication middleware, or something like

app.Use((ctx, next) => {
      if (!ctx.Context.User.Identity.IsAuthenticated) {
        ctx.Context.Response.StatusCode = (int)HttpStatusCode.Unauthorized;
      } else {
          next(ctx);
      }
}

eventually with the check for Request URL and redirecting to a sign in page.

This can be built in wpdotnet, just not sure for now, how to make it nicely

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants