Marco
eec450677f
Do not duplicate and overwrite parts of cookie configuration anymore
...
Previously, PHP's configuration directives 'session.cookie_httponly'
and 'session.cookie_secure' were always overwritten with duplicated
and separately tracked variants of each directive
2017-10-20 22:30:16 +02:00
Marco
f1360dceba
Improve code style
2017-10-20 08:53:02 +02:00
Marco
2cf7b27ba3
Support empty path scope for cookies to restrict to current directory
2017-10-20 08:47:56 +02:00
Marco
1eedfd0e02
Simplify code based on assumptions about new 'Delight\Cookie' behavior
2017-10-20 01:12:04 +02:00
Marco
757579523c
Use constants from 'Delight\Cookie\Cookie' class for cookie prefixes
2017-10-19 22:33:18 +02:00
Marco
71506eaa05
Rename two methods for logout to highlight the better default version
2017-10-19 20:25:11 +02:00
Marco
ce8dbbc436
Delete 'remember me' cookies from previous major versions as well
2017-10-19 20:19:19 +02:00
Marco
891cef2511
Do not make repeated attempts to use invalid 'remember me' cookies
2017-10-19 03:00:28 +02:00
Marco
f70613b2b8
Ignore defined but empty selectors and tokens from 'remember me'
2017-10-19 02:55:49 +02:00
Marco
59816d1a40
Re-use 'remember me' cookie from previous major versions if available
2017-10-19 02:50:24 +02:00
Marco
1284f64f04
Fix documentation for method 'setRememberCookie' in class 'Auth'
2017-10-19 02:27:42 +02:00
Marco
8165e8917b
Change name of 'remember me' cookie to be dependent on session name
2017-10-19 01:44:19 +02:00
Marco
36880b87c9
Implement method 'createRememberCookieName' in class 'Auth'
2017-10-18 23:03:41 +02:00
Marco
e7b590dc80
Implement method 'createCookieName' in class 'Auth'
2017-10-18 22:52:00 +02:00
Marco
33d2384c93
Add list of available cookie prefixes as constant in class 'Auth'
2017-10-18 22:48:14 +02:00
Marco
1169856217
Improve code style
2017-10-18 22:47:24 +02:00
Marco
fa8fa4887e
Improve documentation in class 'Auth'
2017-10-18 21:59:25 +02:00
Marco
8fecb86f15
Improve code style
2017-10-12 02:42:40 +02:00
Pavel Levin
04c466b309
Drop superfluous check using 'isset'
2017-10-12 02:32:13 +02:00
Marco
61041cc6fd
Invalidate outstanding password reset tokens on email address change
2017-09-27 21:58:28 +02:00
Marco
404739634d
Compose 'logout' using new 'logOutButKeepSession' and 'destroySession'
2017-09-18 16:08:32 +02:00
Marco
82a24fbbca
Implement method 'destroySession' in class 'Auth'
2017-09-18 16:07:05 +02:00
Marco
1a195adf39
Implement method 'logOutButKeepSession' in class 'Auth'
2017-09-18 16:01:47 +02:00
Marco
5e4d4fd072
Improve language
2017-09-18 15:53:59 +02:00
Marco
6162092618
Catch undefined IP address in rare use cases such as CLI usage
2017-09-18 14:54:39 +02:00
Marco
3d8c583823
Remove exception from PHPDoc that cannot reasonably appear in practice
2017-08-19 00:46:38 +02:00
Marco
52ba03248d
Make 'throttle' method for throttling or rate limiting a public method
2017-08-19 00:42:53 +02:00
Marco
a66312bbcf
Re-implement internal throttling or rate limiting from scratch
2017-08-19 00:22:21 +02:00
Marco
c9a4e28c7b
Implement methods for re-sending confirmation requests in class 'Auth'
2017-08-07 21:08:06 +02:00
Marco
f83ac969d4
Add class 'ConfirmationRequestNotFound'
2017-08-07 19:36:13 +02:00
Marco
e3873f2d15
Use alternative 'LIMIT' syntax with wider compatibility in SQL query
2017-08-07 18:52:36 +02:00
Marco
b7a47fc707
Extract TTL in seconds of (email) confirmation requests into constant
2017-08-07 18:51:21 +02:00
Marco
62c5fab1ad
Re-implement 'changePassword' method using two existing methods
...
Make use of 'reconfirmPassword' and 'changePasswordWithoutOldPassword'
2017-08-04 00:35:50 +02:00
Marco
1800525b51
Implement new method 'changePasswordWithoutOldPassword' in 'Auth'
2017-08-04 00:31:35 +02:00
Marco
d5ae78a418
Hint at related methods for email confirmation where required
2017-07-30 20:53:18 +02:00
Marco
e925a73ef8
Implement method 'changeEmail' in class 'Auth'
2017-07-30 20:51:58 +02:00
Marco
39f9b00b45
Reflect changed email address in same session immediately
2017-07-30 20:24:19 +02:00
Marco
af5ce5a0b4
Allow 'confirmEmail' to be used additionally to change email addresses
2017-07-30 20:04:08 +02:00
Marco
15f73567b6
Update accounts by ID instead of email after confirming email address
2017-07-30 19:59:09 +02:00
Marco
90c621aeb0
Store affected user ID when creating new email confirmation requests
2017-07-30 19:46:45 +02:00
Marco
28979925d7
Let 'Auth' access 'createConfirmationRequest' from 'UserManager'
2017-07-30 19:41:27 +02:00
Marco
2247c2781c
Allow for users to enable or disable password resets on their own
2017-07-30 16:34:29 +02:00
Marco
4b6afc7c48
Fail with exception in 'resetPassword' if password reset is disabled
2017-07-30 16:12:57 +02:00
Marco
a3a28af2aa
Fail with exception in 'forgotPassword' if password reset is disabled
2017-07-30 16:12:10 +02:00
Marco
c842fa9792
Add class 'ResetDisabledException'
2017-07-30 15:48:19 +02:00
Marco
838c6edf66
Implement method 'confirmEmailAndSignIn' in class 'Auth'
2017-07-30 14:19:07 +02:00
Marco
ad5784364d
Return confirmed email address from 'confirmEmail' in class 'Auth'
2017-07-30 14:16:52 +02:00
Marco
f56e7e6871
Implement method 'reconfirmPassword' in class 'Auth'
2017-07-30 00:54:06 +02:00
Marco
5274dd5f8e
Support optional prefix for the names of all database tables
2017-07-30 00:04:48 +02:00
Marco
bc44a08b1b
Allow for roles to be checked for users via 'Administration' class
2017-07-29 20:24:24 +02:00
