Install

Works with Drupal: ^10 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 11.09 KB
MD5: daed2dfb2bf55eb967c57d5056974d25
SHA-1: c7f21347fce45999e3b59083007ba8cc146e191d
SHA-256: a34dd573e439e790c116a7d2717a7f202653c4162d0287f87ab6f82f8596cead
Download zip 13.72 KB
MD5: 67712eaa90241d16f2c4750c89dc9938
SHA-1: 305d840b4add23908d99c8a8fbe7607a4b3d94ec
SHA-256: 765240230cb33b213c91405b64ced4ed3693d4fb9a608486a5bba49ec1259830
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

## [1.0.0-beta1] - 2025-09-25
### Added
- Per-form, per-session encryption keys embedded in forms for login, registration, and user edit.
- Client-side derivation of SHA256 passkey from form-provided key.
- Server-side validation of submitted form keys and user-facing error when keys mismatch.
- Detailed logging for key mismatches and decryption failures.

### Changed
- Removed session-token exposure via `drupalSettings`.
- Moved key storage from session to persistent state keyed by form ID and session ID.

### Security
- Improved server-side validation and logging to detect potential tampering or expired sessions.

Created by: mesharideb
Created on: 25 Sep 2025 at 13:54 UTC
Last updated: 25 Sep 2025 at 13:54 UTC
Git tag 1.0.0-beta1
Bug fixes
New features

Other releases