phpsa / filament-authentication

MIT License
106 stars 23 forks source link

Track password history #53

Open SnirCD opened 1 month ago

SnirCD commented 1 month ago

As a system admin I want to prevent a user from reusing the same 2 passwords every set amount of time.

Background I want the user to update their password every 90 days. The current behaviour is that the user can save its password to "password" and then after 90 days to "password1" and then back again to "password".

Allow an setting config to track the last X passwords, so when a user updates the password, the system will prevent the user from updating the new password if it was set the the last X passwords.