1
0
mirror of https://github.com/flarum/core.git synced 2025-10-17 09:46:14 +02:00
Files
php-flarum/src
Toby Zerner 5dfb9b474c Auth token and avatarUrl security improvements (#1514)
* Remove AbstractOAuth2Controller

There is no reason to provide an implementation for a specific oAuth2
library in core; it's not generic enough (eg. auth-twitter can't use it).

This code could be moved into another package which auth extensions
depend on, but it's a negligible amount of relatively simple code that
I don't think it's worth the trouble.

* Introduce login providers

Users can have many login providers (a combination of a provider name
and an identifier for that user, eg. their Facebook ID).

After retrieving user data from a provider (eg. Facebook), you pass the
login provider details into the Auth\ResponseFactory. If an associated
user is found, a response that logs them in will be returned. If not, a
registration token will be created so the user can proceed to sign up.
Once the token is fulfilled, the login provider will be associated with
the user.
2018-09-22 13:48:27 +09:30
..
2018-09-21 14:28:02 +09:30
2018-08-22 07:58:50 +02:00
2018-09-21 23:30:14 +02:00
2018-06-30 12:31:12 +09:30
2018-09-21 11:22:51 +09:30
2018-07-21 17:18:40 +09:30
2018-09-21 11:32:46 +09:30
2018-09-21 11:22:26 +09:30
2018-02-08 06:38:08 +10:30