90 Commits

Author	SHA1	Message	Date
Marco	a66312bbcf	Re-implement internal throttling or rate limiting from scratch	2017-08-19 00:22:21 +02:00
Marco	c9a4e28c7b	Implement methods for re-sending confirmation requests in class 'Auth'	2017-08-07 21:08:06 +02:00
Marco	62c5fab1ad	Re-implement 'changePassword' method using two existing methods ... Make use of 'reconfirmPassword' and 'changePasswordWithoutOldPassword'	2017-08-04 00:35:50 +02:00
Marco	1800525b51	Implement new method 'changePasswordWithoutOldPassword' in 'Auth'	2017-08-04 00:31:35 +02:00
Marco	d5ae78a418	Hint at related methods for email confirmation where required	2017-07-30 20:53:18 +02:00
Marco	e925a73ef8	Implement method 'changeEmail' in class 'Auth'	2017-07-30 20:51:58 +02:00
Marco	39f9b00b45	Reflect changed email address in same session immediately	2017-07-30 20:24:19 +02:00
Marco	af5ce5a0b4	Allow 'confirmEmail' to be used additionally to change email addresses	2017-07-30 20:04:08 +02:00
Marco	15f73567b6	Update accounts by ID instead of email after confirming email address	2017-07-30 19:59:09 +02:00
Marco	2247c2781c	Allow for users to enable or disable password resets on their own	2017-07-30 16:34:29 +02:00
Marco	4b6afc7c48	Fail with exception in 'resetPassword' if password reset is disabled	2017-07-30 16:12:57 +02:00
Marco	a3a28af2aa	Fail with exception in 'forgotPassword' if password reset is disabled	2017-07-30 16:12:10 +02:00
Marco	838c6edf66	Implement method 'confirmEmailAndSignIn' in class 'Auth'	2017-07-30 14:19:07 +02:00
Marco	ad5784364d	Return confirmed email address from 'confirmEmail' in class 'Auth'	2017-07-30 14:16:52 +02:00
Marco	f56e7e6871	Implement method 'reconfirmPassword' in class 'Auth'	2017-07-30 00:54:06 +02:00
Marco	5274dd5f8e	Support optional prefix for the names of all database tables	2017-07-30 00:04:48 +02:00
Marco	c25b74d405	Provide read access to user's roles via 'Auth' interface	2017-07-29 18:19:00 +02:00
Marco	2278b86fba	Read user's roles from database and maintain value in session data	2017-07-29 18:15:17 +02:00
Marco	c2ab825354	Extract class 'Base64' into external library	2017-07-24 21:56:35 +02:00
Marco	449e1c69ee	Remove obsolete 'pre-check' and 'post-check' for 'Cache-Control'	2017-07-21 06:20:30 +02:00
Marco	0909291cf1	Support multi-factor authentication via 'onBeforeSuccess' callback	2017-07-02 23:12:36 +02:00
Marco	ee485f99ab	Ensure compatibility with SQLite which does not cast to native types	2017-06-12 20:29:58 +02:00
Marco	93477e4e7e	Add shorthands for 'getStatus' in 'Auth' class	2017-02-26 13:45:00 +01:00
Marco	d59ac83d13	Refactor array definition in 'authenticateUserInternal'	2017-02-26 13:13:37 +01:00
Marco	a05d277a2c	Read status from 'users' table and provide read access in session	2017-02-26 13:03:52 +01:00
Marco	9ec74b3b2d	Deprecate boolean format for parameter 'rememberDuration' with login	2017-02-25 18:06:07 +01:00
Marco	9c60acec0d	Improve code style	2017-02-25 17:58:29 +01:00
Marco	f06af42f87	Move method 'getUserDataByUsername' from 'Auth' to 'UserManager'	2017-02-25 16:18:51 +01:00
Marco	da4bb583bf	Add component for administrative tasks as class 'Administration'	2017-02-21 09:43:30 +01:00
Marco	d99979f270	Move method 'createUserInternal' from class 'Auth' to 'UserManager'	2017-02-21 09:28:42 +01:00
Marco	ff6d78942a	Move method 'createConfirmationRequest' from 'Auth' to 'UserManager'	2017-02-21 09:26:10 +01:00
Marco	ad2aa84e4a	Move method 'validatePassword' from class 'Auth' to 'UserManager'	2017-02-21 09:19:09 +01:00
Marco	f7d50d53ea	Move method 'validateEmailAddress' from class 'Auth' to 'UserManager'	2017-02-21 09:17:08 +01:00
Marco	e916c3d07e	Move method 'createRandomString' from class 'Auth' to 'UserManager'	2017-02-21 09:13:39 +01:00
Marco	43fa612d67	Move method 'throttle' and its constants from 'Auth' to 'UserManager'	2017-02-21 08:55:10 +01:00
Marco	0b0258f29a	Manually require file 'Exceptions.php' in parent class as well	2017-02-21 08:45:27 +01:00
Marco	9252bee030	Let parent class 'UserManager' manage database connection for 'Auth'	2017-02-21 08:40:30 +01:00
Marco	8ab08f41e1	Let autoloader fetch class 'Base64' instead of including it manually	2017-02-21 08:27:19 +01:00
Marco	83464c0be7	Improve description of 'Auth' class	2017-02-21 08:07:38 +01:00
Marco	b5c853388c	Make class 'Auth' final	2017-02-21 08:01:41 +01:00
Marco	5585623e08	Let class 'Auth' extend abstract class 'UserManager'	2017-02-21 08:00:26 +01:00
Marco	3cb2284870	Add public method 'loginWithUsername' to class 'Auth'	2017-02-20 21:36:45 +01:00
Marco	690485ba6d	Add support for sign in via username to 'authenticateUserInternal'	2017-02-20 21:32:45 +01:00
Marco	495a87d499	No need to check for uniqueness of username if none has been provided	2017-02-20 20:52:02 +01:00
Marco	784030139b	Treat empty string or whitespace-only string as non-existent username	2017-02-20 20:48:03 +01:00
Marco	fb6f3d31b8	Add private method 'getUserDataByUsername' to class 'Auth'	2017-02-20 19:57:23 +01:00
Marco	f2561a1932	Re-use 'getUserDataByEmailAddress' in 'authenticateUserInternal'	2017-02-16 08:56:44 +01:00
Marco	8cc54473e3	Improve language of parameter name	2017-02-16 08:30:24 +01:00
Marco	f26f2209cd	Store email address in session data as found in the database	2017-02-16 08:25:14 +01:00
Marco	188086f2e4	Do not validate password earlier than necessary	2017-02-16 08:18:48 +01:00