August 2020 Summaries

FusionAuth is an authentication system that provides user management and registration capabilities. It allows developers to build custom registration forms to capture specific information from users, such as password, first name, phone number, geographic area of interest, minimum house price, and maximum house price. The form fields can be customized, including adding custom fields and reordering the existing ones. The registration process involves two steps: one for basic account information and another for additional information related to the user's home buying needs. FusionAuth provides APIs for managing registration forms programmatically. Once a form is created, it can be associated with an application and reused across different applications or managed without writing code. After completing the registration process, users are redirected to a configured URL, and their account information is available in the administrative user interface. However, there's a need to improve the theme of the placeholders for better user experience.

The text explains how to use FusionAuth, a user management system, to lock user accounts when they sign in with a breached password, a feature not provided by default. It discusses configuring FusionAuth to detect compromised passwords, setting up webhooks to listen for password breach events, and using PHP to deactivate affected user accounts. The tutorial highlights the integration of webhooks to notify other systems and take further actions, such as deactivating users, notifying other services, or analyzing security violations. It emphasizes the importance of setting webhooks to ensure they succeed before processing login events, which prevents users from logging in with breached passwords. The guide also mentions customization options for user notifications and the need to secure webhooks for production use.

The newly released FusionAuth version 1.18, launched in July 2020, introduces several enhancements, primarily focusing on bug fixes and user interface improvements while also adding new features for users on paid plans. Noteworthy additions include advanced registration forms, allowing for flexible and customizable registration processes without requiring coding, and support for LDAP integration through a feature called Connectors, which enables authentication against external systems. This version also addresses over ten bugs and resolves various GitHub issues, including changes to JWT claims and refresh tokens. A significant data migration is part of the update, suggesting users with large datasets test the upgrade process beforehand. FusionAuth provides resources such as an upgrade guide and support for licensed plan users to assist with the transition to this new version.