Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Process tag cloud page through Slim controller | ArthurHoaro | 2020-07-23 | 1 | -0/+10 |
| | |||||
* | Render login page through Slim controller | ArthurHoaro | 2020-01-26 | 1 | -0/+6 |
| | |||||
* | SessionManager+LoginManager: fix checkLoginState logic | VirtualTam | 2018-06-02 | 1 | -1/+4 |
| | | | | Signed-off-by: VirtualTam <virtualtam@flibidi.net> | ||||
* | SessionManager: remove unused UID token | VirtualTam | 2018-06-02 | 1 | -6/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | There already are dedicated tokens for: - CSRF protection - user stay-signed-in feature, via cookie This token was most likely intended as a randomly generated, server-side, secret key to be used when generating hashes. See http://sebsauvage.net/wiki/doku.php?id=php:session [FR] Relevant section: Une clé secrète unique aléatoire est générée côté serveur (et jamais envoyée). Elle peut servir pour signer les formulaires (HMAC) ou générer des token de formulaires (protection contre XSRF). Voir $_SESSION['uid']. Translation: A unique, server-side secret key is randomly generated (and never transmitted). It can be used to sign forms (HMAC) or generate form tokens (protection against XSRF). See $_SESSION['uid'] Signed-off-by: VirtualTam <virtualtam@flibidi.net> | ||||
* | Refactor LoginManager stay-signed-in token management | VirtualTam | 2018-06-02 | 1 | -3/+0 |
| | | | | Signed-off-by: VirtualTam <virtualtam@flibidi.net> | ||||
* | Refactor session and cookie timeout control | VirtualTam | 2018-06-02 | 1 | -11/+37 |
| | | | | Signed-off-by: VirtualTam <virtualtam@flibidi.net> | ||||
* | Move LoginManager and SessionManager to the Security namespace | VirtualTam | 2018-06-02 | 1 | -0/+179 |
Signed-off-by: VirtualTam <virtualtam@flibidi.net> |