All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
3.0.0.0 - 2026-06-11
- installable in OXID eShop 7.0 to 7.5
- Twig-based template support (Apex theme)
- replay protection
- brute force protection
- use separated session variable names between front and backend
- use a generated master key instead of a static one
- use hardened backup codes (former (old style) codes keep working until they are used or resetted)
- support for OXID eShop < 7
- support for Smarty-based templates
2.1.1.0 - 2023-09-07
- installable in OXID 6.5.2 + 6.5.3
- product logo
2.1.0.0 - 2023-02-18
- add compatibility to the D3 Webauthn plugin
- installable in OXID 6.5.1
2.0.0.1 - 2022-11-09
- Further protection of the login
2.0.0.0 - 2022-09-30
- installable in OXID 6.3 to 6.5
- tests completed
- support for OXID < 6.3
1.1.0.0 - 2022-09-30
- installable in OXID 6.0 to 6.2
- mandatory 2FA use for all admin accounts
1.0.0.0 - 2019-08-19
- 2-factor authentication for logins in front- and backend in addition to username and password
- Activation and setup are possible in the front and back end
- Authentication is shown for user accounts that have this enabled - otherwise the usual default login.
- Access can be set up in the Auth app by scannable QR code or copyable character string
- Validation of one-time passwords and generation of QR codes are only carried out within the shop - no communication to the outside is necessary
- static backup codes also allow (limited) login without access to the generation tool