- Username & Password login, simply add a user via the backend and login. Note that users needs to be in a category that has "user" rights to be able to login.
- Password restrictions can be configured in the project configuration and allows you to modify the amount of lower/upper case letters, numbers and special characters as well as the password hashing algorithm.
- Backend login, the root user can setup other users to be allowed to login to the JAS backend.
- Host restrictions, can be setup by the user to limit which hosts (hostnames, IP addresses and/or subnets) he want to be able to login from.
- Multiple user groups, the user will always be in at least 1 user group (aka category) however he can be added to additional groups to get additional rights.
- Login attempts, when the attempts module is active a login should be successful in 3 tries otherwise logging in with that user is forbidden for 5 minutes. Additionally the source IP is also blocked after 5 tries for 5 minutes. Note that after the 5 minutes only 1 try is allowed and failure will result in another 5 minutes ban, only a successful login will reset this restriction.
Note that the users module is only provided for your convenience, if you want to provide your own user module than that's possible. Just create a module and configure JAS to use that "User module" or just create a module called "users" and place it in the project modules directory.
