Marco
9f71eff176
Remove method 'logOutAndDestroySession' from class 'Auth'
2018-03-25 01:28:35 +01:00
Marco
fdd95e8b89
Improve language
2018-03-25 01:10:29 +01:00
Marco
20f484567a
Implement method 'logOutEverywhereElse' in class 'Auth'
2018-03-25 01:07:40 +01:00
Marco
3ae1769256
Implement method 'logOutEverywhere' in class 'Auth'
2018-03-25 00:28:21 +01:00
Marco
4d7b66ee5a
When performing normal logout only delete local remember directives
2018-03-24 23:31:12 +01:00
Marco
62270a2c48
Permit restriction to selector in 'deleteRememberDirectiveForUserById'
2018-03-24 23:13:04 +01:00
Marco
9848082bbb
Implement method 'getRememberDirectiveExpiry' in class 'Auth'
2018-03-24 23:09:18 +01:00
Marco
29afbdfc93
Implement method 'getRememberDirectiveSelector' in class 'Auth'
2018-03-24 23:02:01 +01:00
Marco
62f4b39dcf
Perform logout for user whenever 'force_logout' has been incremented
2018-03-24 18:15:21 +01:00
Marco
adc1d73539
Store and manage 'force_logout' value from 'users' table in session
2018-03-24 18:04:06 +01:00
Marco
7be05ddde2
Improve documentation
2018-03-24 17:44:42 +01:00
Marco
a63e5ec053
Move essence of 'deleteRememberDirectiveForUserById' to 'UserManager'
2018-03-20 16:09:25 +01:00
Marco
4115340927
Improve language
2018-03-20 16:04:29 +01:00
Marco
09dac6a5f5
Rename method 'deleteRememberDirective' in class 'Auth'
...
Use more expressive name 'deleteRememberDirectiveForUserById'
2018-03-20 15:57:37 +01:00
maxsenft
e14f3d1925
Rename method 'updatePassword' to 'updatePasswordInternal'
2018-03-20 15:45:25 +01:00
maxsenft
1d54ff2f6b
Move 'updatePassword' method from class 'Auth' to class 'UserManager'
2018-03-20 15:41:57 +01:00
Marco
e7e174b05d
Only configure and start session if not already started
2018-03-12 22:29:56 +01:00
Marco
21341d3c18
Regularly resynchronize session data with authoritative source in DB
2018-03-10 20:53:13 +01:00
Marco
9478a43e9b
Re-implement method 'canResetPassword' using 'canResetPasswordOrThrow'
2018-03-10 04:13:14 +01:00
Marco
d246248ab5
Implement method 'canResetPasswordOrThrow' in class 'Auth'
2018-03-10 03:54:42 +01:00
Marco
012577227a
Implement method 'getRoles' in class 'Auth'
2018-03-10 02:54:57 +01:00
Marco
09247e7203
Provide possibility to disable throttling during development
2017-11-08 21:34:05 +01:00
Marco
ab1c54fae2
Optimize order of throttling in 'changeEmail' method from class 'Auth'
2017-11-08 20:40:37 +01:00
Marco
23acb66cc7
Reduce permitted frequency of requests to change one's email address
2017-11-08 20:38:16 +01:00
Marco
ba4dc29ca5
Optimize order of throttling in 'resendConfirmationForColumnValue'
2017-11-08 20:23:34 +01:00
Marco
0a97f67515
Enforce limits for resending confirmations solely via throttling
2017-11-08 20:21:35 +01:00
Marco
7a94c6acef
Improve documentation in 'confirmEmail' method from 'Auth' class
2017-11-08 19:23:22 +01:00
Marco
67443c122a
Move core logic of 'onLoginSuccessful' from 'Auth' to 'UserManager'
2017-11-03 08:50:59 +01:00
Marco
24056e89a4
Move constants holding names of session fields to 'UserManager'
2017-11-03 08:49:10 +01:00
Marco
c06bc7da1a
Improve documentation for method 'onLoginSuccessful' in class 'Auth'
2017-11-03 08:38:17 +01:00
Marco
aedd2125fc
Document constants holding names of session fields
2017-11-03 08:36:03 +01:00
Marco
425cf9b6f6
Write to session fields directly instead of using accessor methods
2017-11-03 08:33:41 +01:00
Marco
81091df66b
Drop constructor arguments 'useHttps' and 'allowCookiesScriptAccess'
2017-10-20 23:07:36 +02:00
Marco
eec450677f
Do not duplicate and overwrite parts of cookie configuration anymore
...
Previously, PHP's configuration directives 'session.cookie_httponly'
and 'session.cookie_secure' were always overwritten with duplicated
and separately tracked variants of each directive
2017-10-20 22:30:16 +02:00
Marco
f1360dceba
Improve code style
2017-10-20 08:53:02 +02:00
Marco
2cf7b27ba3
Support empty path scope for cookies to restrict to current directory
2017-10-20 08:47:56 +02:00
Marco
1eedfd0e02
Simplify code based on assumptions about new 'Delight\Cookie' behavior
2017-10-20 01:12:04 +02:00
Marco
757579523c
Use constants from 'Delight\Cookie\Cookie' class for cookie prefixes
2017-10-19 22:33:18 +02:00
Marco
71506eaa05
Rename two methods for logout to highlight the better default version
2017-10-19 20:25:11 +02:00
Marco
ce8dbbc436
Delete 'remember me' cookies from previous major versions as well
2017-10-19 20:19:19 +02:00
Marco
891cef2511
Do not make repeated attempts to use invalid 'remember me' cookies
2017-10-19 03:00:28 +02:00
Marco
f70613b2b8
Ignore defined but empty selectors and tokens from 'remember me'
2017-10-19 02:55:49 +02:00
Marco
59816d1a40
Re-use 'remember me' cookie from previous major versions if available
2017-10-19 02:50:24 +02:00
Marco
1284f64f04
Fix documentation for method 'setRememberCookie' in class 'Auth'
2017-10-19 02:27:42 +02:00
Marco
8165e8917b
Change name of 'remember me' cookie to be dependent on session name
2017-10-19 01:44:19 +02:00
Marco
36880b87c9
Implement method 'createRememberCookieName' in class 'Auth'
2017-10-18 23:03:41 +02:00
Marco
e7b590dc80
Implement method 'createCookieName' in class 'Auth'
2017-10-18 22:52:00 +02:00
Marco
33d2384c93
Add list of available cookie prefixes as constant in class 'Auth'
2017-10-18 22:48:14 +02:00
Marco
1169856217
Improve code style
2017-10-18 22:47:24 +02:00
Marco
fa8fa4887e
Improve documentation in class 'Auth'
2017-10-18 21:59:25 +02:00
