Implement lock screen functionality

[kartik-v]

This is a variation to #102 - and not sure how much of it is possible in this module... but it would be nice to have.

It is a scenario where a lock screen can be activated for security if app is open on the user interface for a stipulated threshold (more for UI/screen security or when using on mobile devices).

• Enable a timeout to trigger a lock screen (not sure it is possible without javascript) - but via server code provide some api hooks or some default JS to trigger this
• refer here for a lock screen UI example
• for the user - on just entering the password in the lock screen - user gets back to where he/she was working on.
• ability to provide actions and widgets to UNLOCK and LOCK via buttons (for developer ease).

[tonydspaniard]

@kartik-v I have been thinking about this, and we can do it throughout a LockScreenWidget + a couple of actions on the SecurityController. That way we could encapsulate the required js (which is quite simple) on the widget itself.

[kartik-v]

Sounds good ... 👍

[maxxer]

https://www.yiiframework.com/extension/ayrozjlc/yii2-blockui

[Eseperio]

This is pretty simple to do. It is done via a cookie that last longer than session cookie and only contains username or a token. To make it secure should be a token that is used to find the username. That token must have a lifetime, to be used like an OTP. So no brute force attack can guess the users of the database.
If there is no code developed i can do, because i will need it soon.