2ded232d8e
Document 'httponly' cookie attribute and how to change it in README
2017-10-21 22:30:41 +02:00
70a905afd7
Document 'path' cookie attribute and how to change it in README
2017-10-21 22:29:19 +02:00
84f3ad10a9
Document 'domain' cookie attribute and how to change it in README
2017-10-21 22:26:25 +02:00
81091df66b
Drop constructor arguments 'useHttps' and 'allowCookiesScriptAccess'
2017-10-20 23:07:36 +02:00
8926e7e708
Improve general upgrade guide in migration notes
2017-10-20 22:46:01 +02:00
eec450677f
Do not duplicate and overwrite parts of cookie configuration anymore
...
Previously, PHP's configuration directives 'session.cookie_httponly'
and 'session.cookie_secure' were always overwritten with duplicated
and separately tracked variants of each directive
2017-10-20 22:30:16 +02:00
f1360dceba
Improve code style
2017-10-20 08:53:02 +02:00
2cf7b27ba3
Support empty path scope for cookies to restrict to current directory
2017-10-20 08:47:56 +02:00
ecd8015acf
Explain changes to domain scope of cookies in migration guide
2017-10-20 08:01:00 +02:00
1eedfd0e02
Simplify code based on assumptions about new 'Delight\Cookie' behavior
2017-10-20 01:12:04 +02:00
757579523c
Use constants from 'Delight\Cookie\Cookie' class for cookie prefixes
2017-10-19 22:33:18 +02:00
d695328a5a
Update dependencies
2017-10-19 22:29:50 +02:00
71506eaa05
Rename two methods for logout to highlight the better default version
2017-10-19 20:25:11 +02:00
ce8dbbc436
Delete 'remember me' cookies from previous major versions as well
2017-10-19 20:19:19 +02:00
d181219e40
Add documentation about cookies and their usage to README
2017-10-19 20:11:28 +02:00
891cef2511
Do not make repeated attempts to use invalid 'remember me' cookies
2017-10-19 03:00:28 +02:00
f70613b2b8
Ignore defined but empty selectors and tokens from 'remember me'
2017-10-19 02:55:49 +02:00
59816d1a40
Re-use 'remember me' cookie from previous major versions if available
2017-10-19 02:50:24 +02:00
1284f64f04
Fix documentation for method 'setRememberCookie' in class 'Auth'
2017-10-19 02:27:42 +02:00
8165e8917b
Change name of 'remember me' cookie to be dependent on session name
2017-10-19 01:44:19 +02:00
a4b68167a1
Prepare migration guide for next major release
2017-10-19 00:47:47 +02:00
fc2fb4bb44
Move 'Refresh' button from bottom to top in 'tests'
2017-10-19 00:36:08 +02:00
b2a3fde696
Add tests for method 'createRememberCookieName' from class 'Auth'
2017-10-18 23:08:01 +02:00
36880b87c9
Implement method 'createRememberCookieName' in class 'Auth'
2017-10-18 23:03:41 +02:00
4a66965994
Add tests for method 'createCookieName' from class 'Auth'
2017-10-18 23:01:15 +02:00
e7b590dc80
Implement method 'createCookieName' in class 'Auth'
2017-10-18 22:52:00 +02:00
33d2384c93
Add list of available cookie prefixes as constant in class 'Auth'
2017-10-18 22:48:14 +02:00
1169856217
Improve code style
2017-10-18 22:47:24 +02:00
fa75811679
Display current session name in 'tests'
2017-10-18 22:30:06 +02:00
fa8fa4887e
Improve documentation in class 'Auth'
2017-10-18 21:59:25 +02:00
8fecb86f15
Improve code style
2017-10-12 02:42:40 +02:00
04c466b309
Drop superfluous check using 'isset'
2017-10-12 02:32:13 +02:00
61041cc6fd
Invalidate outstanding password reset tokens on email address change
2017-09-27 21:58:28 +02:00
2ca835ac75
Improve language
2017-09-26 22:54:42 +02:00
1e23e6de13
Improve code style
2017-09-26 22:44:37 +02:00
50220d463b
Simplify documentation for 'changePasswordWithoutOldPassword'
2017-09-26 22:35:16 +02:00
f0bdd7b63e
Improve language
2017-09-26 22:28:00 +02:00
0473d59c39
Show that users are to reconfirm their password for reset control
2017-09-26 22:24:46 +02:00
f8f44a0286
Show that users are to reconfirm their password for email changes
2017-09-26 22:23:28 +02:00
ea91d8c92e
Explain that users should be notified about email address changes
2017-09-26 22:20:07 +02:00
7983bebd83
Explain that users should be informed via email about password changes
2017-09-26 22:17:21 +02:00
ddc5b50459
Improve list of methods that support 'remember me' feature in README
2017-09-23 00:17:31 +02:00
0b67f3d1e2
Document new method 'logOutButKeepSession' from class 'Auth'
2017-09-18 16:10:47 +02:00
16bcfa85ef
Add tests for new method 'logOutButKeepSession' in class 'Auth'
2017-09-18 16:10:19 +02:00
404739634d
Compose 'logout' using new 'logOutButKeepSession' and 'destroySession'
2017-09-18 16:08:32 +02:00
82a24fbbca
Implement method 'destroySession' in class 'Auth'
2017-09-18 16:07:05 +02:00
1a195adf39
Implement method 'logOutButKeepSession' in class 'Auth'
2017-09-18 16:01:47 +02:00
5e4d4fd072
Improve language
2017-09-18 15:53:59 +02:00
6162092618
Catch undefined IP address in rare use cases such as CLI usage
2017-09-18 14:54:39 +02:00
f142dd91dc
Emphasize primary line of project description in README
2017-08-25 07:57:47 +02:00
