Marco
c494e0fa13
Throw 'UnknownIdException' in 'updatePasswordInternal' when no matches
2018-03-21 03:20:11 +01:00
Marco
d7d9899167
Use 'changePasswordForUserById' for 'changePasswordForUserByUsername'
2018-03-21 02:55:31 +01:00
Marco
05165a44a6
Implement method 'changePasswordForUserById' in class 'Administration'
2018-03-21 02:54:50 +01:00
Marco
627c592891
Let 'Administration' constructor be part of public API
2018-03-20 16:13:56 +01:00
Marco
2a6d1c4f7d
Delete 'remember me' directives in 'changePasswordForUserByUsername'
2018-03-20 16:11:56 +01:00
Marco
a63e5ec053
Move essence of 'deleteRememberDirectiveForUserById' to 'UserManager'
2018-03-20 16:09:25 +01:00
Marco
4115340927
Improve language
2018-03-20 16:04:29 +01:00
Marco
09dac6a5f5
Rename method 'deleteRememberDirective' in class 'Auth'
...
Use more expressive name 'deleteRememberDirectiveForUserById'
2018-03-20 15:57:37 +01:00
Marco
3a7a860c6d
Validate password in 'changePasswordForUserByUsername' for consistency
2018-03-20 15:54:19 +01:00
maxsenft
131aea3ded
Implement method 'changePasswordForUserByUsername' in 'Administration'
2018-03-20 15:50:44 +01:00
maxsenft
e14f3d1925
Rename method 'updatePassword' to 'updatePasswordInternal'
2018-03-20 15:45:25 +01:00
maxsenft
1d54ff2f6b
Move 'updatePassword' method from class 'Auth' to class 'UserManager'
2018-03-20 15:41:57 +01:00
maxsenft
ec6afdad48
Accept 'PdoDsn' and 'PDO' as well in 'Administration' constructor
2018-03-20 15:38:35 +01:00
Marco
58e69fdd0e
Do not pass 'null' to 'count' which triggers a warning since PHP 7.2
2018-03-15 23:32:15 +01:00
Marco
e7e174b05d
Only configure and start session if not already started
2018-03-12 22:29:56 +01:00
Marco
21341d3c18
Regularly resynchronize session data with authoritative source in DB
2018-03-10 20:53:13 +01:00
Marco
477164e8ec
Rename identifiers in comments to prevent highlighting in IDE
2018-03-10 17:46:05 +01:00
Marco
9478a43e9b
Re-implement method 'canResetPassword' using 'canResetPasswordOrThrow'
2018-03-10 04:13:14 +01:00
Marco
d246248ab5
Implement method 'canResetPasswordOrThrow' in class 'Auth'
2018-03-10 03:54:42 +01:00
Marco
d9f9198b45
Implement method 'getRolesForUserById' in class 'Administration'
2018-03-10 03:03:57 +01:00
Marco
012577227a
Implement method 'getRoles' in class 'Auth'
2018-03-10 02:54:57 +01:00
Marco
7d44158c32
Implement methods 'getMap', 'getNames' and 'getValues' in class 'Role'
2018-03-10 01:58:54 +01:00
Marco
09247e7203
Provide possibility to disable throttling during development
2017-11-08 21:34:05 +01:00
Marco
ab1c54fae2
Optimize order of throttling in 'changeEmail' method from class 'Auth'
2017-11-08 20:40:37 +01:00
Marco
23acb66cc7
Reduce permitted frequency of requests to change one's email address
2017-11-08 20:38:16 +01:00
Marco
a7a9d45302
Drop constant 'CONFIRMATION_REQUESTS_TTL_IN_SECONDS' in 'UserManager'
2017-11-08 20:30:09 +01:00
Marco
ba4dc29ca5
Optimize order of throttling in 'resendConfirmationForColumnValue'
2017-11-08 20:23:34 +01:00
Marco
0a97f67515
Enforce limits for resending confirmations solely via throttling
2017-11-08 20:21:35 +01:00
Marco
7a94c6acef
Improve documentation in 'confirmEmail' method from 'Auth' class
2017-11-08 19:23:22 +01:00
Marco
dbbbf1b193
Remove superfluous comment in 'UserManager'
2017-11-08 19:18:14 +01:00
Marco
47d1e303aa
Implement methods for impersonating users in class 'Administration'
2017-11-03 15:21:45 +01:00
Marco
67443c122a
Move core logic of 'onLoginSuccessful' from 'Auth' to 'UserManager'
2017-11-03 08:50:59 +01:00
Marco
24056e89a4
Move constants holding names of session fields to 'UserManager'
2017-11-03 08:49:10 +01:00
Marco
c06bc7da1a
Improve documentation for method 'onLoginSuccessful' in class 'Auth'
2017-11-03 08:38:17 +01:00
Marco
aedd2125fc
Document constants holding names of session fields
2017-11-03 08:36:03 +01:00
Marco
425cf9b6f6
Write to session fields directly instead of using accessor methods
2017-11-03 08:33:41 +01:00
Marco
81091df66b
Drop constructor arguments 'useHttps' and 'allowCookiesScriptAccess'
2017-10-20 23:07:36 +02:00
Marco
eec450677f
Do not duplicate and overwrite parts of cookie configuration anymore
...
Previously, PHP's configuration directives 'session.cookie_httponly'
and 'session.cookie_secure' were always overwritten with duplicated
and separately tracked variants of each directive
2017-10-20 22:30:16 +02:00
Marco
f1360dceba
Improve code style
2017-10-20 08:53:02 +02:00
Marco
2cf7b27ba3
Support empty path scope for cookies to restrict to current directory
2017-10-20 08:47:56 +02:00
Marco
1eedfd0e02
Simplify code based on assumptions about new 'Delight\Cookie' behavior
2017-10-20 01:12:04 +02:00
Marco
757579523c
Use constants from 'Delight\Cookie\Cookie' class for cookie prefixes
2017-10-19 22:33:18 +02:00
Marco
71506eaa05
Rename two methods for logout to highlight the better default version
2017-10-19 20:25:11 +02:00
Marco
ce8dbbc436
Delete 'remember me' cookies from previous major versions as well
2017-10-19 20:19:19 +02:00
Marco
891cef2511
Do not make repeated attempts to use invalid 'remember me' cookies
2017-10-19 03:00:28 +02:00
Marco
f70613b2b8
Ignore defined but empty selectors and tokens from 'remember me'
2017-10-19 02:55:49 +02:00
Marco
59816d1a40
Re-use 'remember me' cookie from previous major versions if available
2017-10-19 02:50:24 +02:00
Marco
1284f64f04
Fix documentation for method 'setRememberCookie' in class 'Auth'
2017-10-19 02:27:42 +02:00
Marco
8165e8917b
Change name of 'remember me' cookie to be dependent on session name
2017-10-19 01:44:19 +02:00
Marco
36880b87c9
Implement method 'createRememberCookieName' in class 'Auth'
2017-10-18 23:03:41 +02:00