1
0
mirror of https://github.com/flarum/core.git synced 2025-10-12 07:24:27 +02:00
Toby Zerner 5dfb9b474c Auth token and avatarUrl security improvements (#1514)
* Remove AbstractOAuth2Controller

There is no reason to provide an implementation for a specific oAuth2
library in core; it's not generic enough (eg. auth-twitter can't use it).

This code could be moved into another package which auth extensions
depend on, but it's a negligible amount of relatively simple code that
I don't think it's worth the trouble.

* Introduce login providers

Users can have many login providers (a combination of a provider name
and an identifier for that user, eg. their Facebook ID).

After retrieving user data from a provider (eg. Facebook), you pass the
login provider details into the Auth\ResponseFactory. If an associated
user is found, a response that logs them in will be returned. If not, a
registration token will be created so the user can proceed to sign up.
Once the token is fulfilled, the login provider will be associated with
the user.
2018-09-22 13:48:27 +09:30
2018-09-22 00:40:19 +02:00
2018-06-30 12:31:12 +09:30
2018-06-20 13:20:31 +09:30
2018-06-20 13:20:31 +09:30
2018-06-20 13:20:31 +09:30
2016-11-16 15:47:12 +10:30
2017-12-31 20:48:23 +01:00

Flarum Core

This repository contains Flarum's core code. If you want to set up a forum, visit the main Flarum repository.

Contributing

Flarum is open-source and we would love your help building it! Please read the Contributing Guide to learn how you can help.

Description
No description provided
Readme 126 MiB
Languages
PHP 65.5%
JavaScript 14.2%
TypeScript 13.9%
Less 5.5%
Blade 0.7%
Other 0.2%