包简介

Recipe for adding MFA, Password check, Breached account check, Security report to a Silverstripe application

README 文档

README

A recipe for adding various security-focused modules to a Silverstripe website.

In this recipe

Authentication boilerplate

The nswdpc/silverstripe-authentication-boilerplate, providing:
- Multi-factor Authentication (MFA) for the administration area via the Silverstripe TOTP Authenticator
- Pwned Password checks via the pwnedpasswords API provided by Have I Been Pwned
- Breached account checks via the haveibeenpwned API provided by Have I Been Pwned
- The Silverstripe security extensions module
- The Silverstripe security report module

Content Security Policy

The NSWDPC CSP module

Captcha

The NSWDPC reCAPTCHA v3 base module

Useful extras

Sessions

DynamoDB sessions

Configuration

There is no configuration provided in this recipe. Its aim is to bring together a set of Silverstripe security modules to be used together in a standardised way. Default configuration settings can be found in the recipe's modules and can be overridden on a per-project basis.

The authentication boilerplate module provides a standard set of rules for defining access to websites. You can modify these rules using the Silverstripe configuration API.

Installation

The only supported way of installing this recipe is via composer

composer require-recipe nswdpc/silverstripe-security-recipe

About recipes

See the recipe plugin page for information on how recipes work.

LICENSE

BSD-3-Clause

Maintainers

dpcdigital@NSWDPC:~$

Bugtracker

We welcome bug reports, pull requests and feature requests on the Github Issue tracker for this project.

Please review the code of conduct prior to opening a new issue.

Security

If you have found a security issue with this module, please email digital[@]dpc.nsw.gov.au in the first instance, detailing your findings.

Development and contribution

If you would like to make contributions to the module please ensure you raise a pull request and discuss with the module maintainers.

Please review the code of conduct prior to completing a pull request.

nswdpc/silverstripe-security-recipe 适用场景与选型建议

nswdpc/silverstripe-security-recipe 是一款基于 PHP 开发的 Composer 扩展包，目前已累计 2.98k 次下载、GitHub Stars 达 3，最近一次更新时间为 2021 年 04 月 21 日，在 PHP 生态内属于活跃度较高的组件。

它主要适用于以下技术方向：「security」「password」「totp」「silverstripe」「2fa」「haveibeenpwned」等业务场景。在实际项目中，围绕这些方向常见需要落地的问题包括：接口对接、性能调优、并发安全、与既有框架（Laravel / ThinkPHP / Yii / Webman 等）的兼容适配，以及生产环境的日志埋点与稳定性保障。

我们在过去多个企业项目中使用过 nswdpc/silverstripe-security-recipe 或与其功能相近的方案，如果你在选型或落地过程中遇到问题，例如 版本兼容、二次改造、私有化封装、与内部系统对接、生产 BUG 排查，欢迎联系我们协助评估。

围绕 nswdpc/silverstripe-security-recipe 我们能提供哪些服务？

定制开发 / 二次开发

基于 nswdpc/silverstripe-security-recipe 在你已有业务上做功能扩展、字段裁剪、UI 适配、与内部账号 / 权限 / 日志系统的深度对接。

BUG 修复 & 性能优化

线上偶发问题、内存泄漏、慢查询、并发异常等排查修复；针对高流量场景做缓存、队列、索引层面的调优。

项目外包 & 长期维护

承接完整的项目从需求 → 设计 → 开发 → 上线 → 长期运维；也可按月提供技术保姆服务。

yvsm@zunyunkeji.com QQ：316430983 微信：yvsm316 西安尊云信息科技 · 专注 PHP / Go / 分布式系统研发

与 nswdpc/silverstripe-security-recipe 相关的其它包

同方向 / 同关键字的高下载量 PHP Composer 包推荐，方便对比选型：

darkv/php-password-generator 4

The PHP class PasswordGenerator serves as a password generator to create memorable passwords like the keychain of macOS ≤ 10.14 did.

sil/route-security-bundle 7

Provide a way to secure accesses to all routes of an symfony application.

makelarisjr/laravel-2fa 5

divineomega/laravel-route-restrictor 4

Laravel middleware to restrict a site or specific routes using HTTP basic authentication

maatify/crypto 1

High-level cryptographic primitives and security utilities for Maatify systems including password hashing, reversible encryption, HKDF key derivation, and key rotation.

xclydes/x-keepass-php 1

A library for reading KeePass 2.x databases

nswdpc/silverstripe-security-recipe

包简介

关键字：