Overview:
To help you provide us with feedback, I’ve gathered an overview of some of the items that you can help test for this RC. We have run internal testing and are very happy with the current state of the build - but extra polishing and testing is always helpful. So if you have time to help - or just find yourself super curious, feel free to dive into the 9.3RC today.
What’s in Umbraco 9.3?
Umbraco 9.3 is a small and focused release. There are a couple of new features, mainly focusing on improving the developer experience for setting up two-factor authentication (2FA) and integrating Members with external login. As always, there are also a bunch of smaller improvements and fixes, many of them from the community 💪
Two-factor Authentication (2FA) for Members
Enabling two-factor authentication is a great way to increase the security of a system. With Umbraco 9.3 it is a lot easier to enable for Umbraco Members. You can set up 2FA to use an authentication service (available from many vendors such as Microsoft, Google and many more) or even create your own codes and send them via email/sms. Using an authentication app/service is viewed as the more secure option and the recommended approach unless you have specific requirements.
Documentation has been updated with the new improvements. See the specific docs for 2FA for Members here.
Easier integration with external login providers for Members
There are more improvements to the developer experience when working with Members. Aside from improved 2FA, you’ll also find that it is much easier to integrate with external login providers such as Google, Facebook, Twitter and so forth. This is now aligned with the standard way of doing this in ASP.NET Core and works pretty much exactly the same way as it does for backoffice users.
The new Member functionality allows you to configure one or more external login providers. These can be used to create and authenticate Members, add a single-sign-on experience and more. Note that the Macro snippets for Login and EditMemberProfile have been updated to support configured external login providers to make it even easier to get started with.
You can find detailed information and examples on how to implement this in the updated security documentation:
If you're looking to try this out, the Microsoft documentation on using login providers can also be helpful.
You can find more information on the PR: https://github.com/umbraco/Umbraco-CMS/pull/11738
Custom Media Folder
You’ll also find improvements to the configuration of where Media is stored. This has been easy, with Umbraco 9, as long as you’re storing it somewhere inside the wwwroot folder of your site. If you wanted to store it outside the wwwroot folder it required a lot more configuration to ensure ImageSharp continued to work as expected.
This has now been addressed to work in the same way in both scenarios. All you need to do is update UmbracoMediaPath and it will work as expected. This can be done in configuration as shown below or via a composer.
