mirror/php-flarum

mirror of https://github.com/flarum/core.git synced 2025-10-13 07:54:25 +02:00

Go to file

Toby Zerner 9896378b59 Overhaul sessions, tokens, and authentication

- Use cookies + CSRF token for API authentication in the default client. This mitigates potential XSS attacks by making the token unavailable to JavaScript. The Authorization header is still supported, but not used by default.
- Make sensitive/destructive actions (editing a user, permanently deleting anything, visiting the admin CP) require the user to re-enter their password if they haven't entered it in the last 30 minutes.
- Refactor and clean up the authentication middleware.
- Add an `onhide` hook to the Modal component. (+1 squashed commit)

2015-12-03 15:11:57 +10:30

Major refactor and improvements

2015-10-08 14:28:02 +10:30

Implement proper update process

2015-10-19 15:09:54 +10:30

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

Clean up some old code

2015-10-22 12:25:22 +10:30

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

Add locale file template

2015-11-05 08:11:59 +09:00

Added validation handler tests

2015-10-28 12:46:49 +00:00

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

.editorconfig

Clean up editorconfig, eslint, npm dependencies

2015-09-04 12:11:34 +09:30

.eslintignore

Add JavaScript eslint config

2015-07-05 21:25:09 +09:30

.eslintrc

Clean up editorconfig, eslint, npm dependencies

2015-09-04 12:11:34 +09:30

.gitattributes

Include the extension stub's .gitignore file

2015-08-29 18:29:33 +09:30

.gitignore

Added some tests for the database setting repository

2015-09-28 15:34:32 +01:00

.php_cs

Add header comment; PSR-2 fixes; remove seeders

2015-08-26 16:56:32 +09:30

.travis.yml

Travis: Test on PHP 7 and HHVM, too

2015-11-02 08:11:22 +01:00

CHANGELOG.md

Overhaul sessions, tokens, and authentication

2015-12-03 15:11:57 +10:30

composer.json

Update text-formatter dependency

2015-11-19 13:00:32 +01:00

CONTRIBUTING.md

Update readme/contributing

2015-11-01 16:00:25 +10:30

LICENSE

Update links and remove license file extension

2015-08-27 19:56:37 +09:30

phpunit.yml

Updated tests namespace to be ps4-valid. Added tests for flooding exception, fixed broken code

2015-10-27 12:48:27 +00:00

README.md

Update readme/contributing

2015-11-01 16:00:25 +10:30

README.md

Flarum Core

This repository contains Flarum's core code. If you want to set up a forum, visit the main Flarum repository.

Contributing

Flarum is open-source and we would love your help building it! Please read the Contributing Guide to learn how you can help.

Languages

PHP 65.5%

JavaScript 14.2%

TypeScript 13.9%

Less 5.5%

Blade 0.7%

Other 0.2%