Alexander Makarov
|
bf6c9cf443
|
Fixes #15783: Regenerate CSRF token only when logging in directly
|
7 years ago |
Brandon Kelly
|
2e55570e1f
|
Fixes #15621: Fixed `yii\web\User::getIdentity()` returning `null` if an exception had been thrown when it was called previously
|
7 years ago |
|
Alexander Makarov
|
6c0540aa2d
|
Fixes #15496: CSRF token is now regenerated on changing identity
|
7 years ago |
Elvira Sheina
|
3c017b6b61
|
Fixes #15462: Fixed `accessChecker` configuration error
|
7 years ago |
Dmitry Naumenko
|
64d8af61a6
|
Fixes for PHP 7.2 compatibility (#14959)
|
7 years ago |
|
Alexander Makarov
|
3ee7629f13
|
Fixes #13486: Use DI container to instantiate cookies in order to be able to set defaults
|
7 years ago |
|
SilverFire - Dmitry Naumenko
|
368540f8d0
|
Added tests
|
7 years ago |
shirase
|
b6a5697c00
|
User can login by cookie only once when `autoRenewCookie` is set to false
|
7 years ago |
Robert Korulczyk
|
fe8a0a6a2e
|
Enable `no_useless_else` rule in php-cs-fixer (#14420)
|
7 years ago |
|
Robert Korulczyk
|
ba0ab403b5
|
Added php-cs-fixer coding standards validation to Travis CI (#14100)
* php-cs-fixer: PSR2 rule.
* php-cs-fixer: PSR2 rule - fix views.
* Travis setup refactoring.
* Add php-cs-fixer to travis cs tests.
* Fix tests on hhvm-3.12
* improve travis config
* composer update
* revert composer update
* improve travis config
* Fix CS.
* Extract config to separate classes.
* Extract config to separate classes.
* Add file header.
* Force short array syntax.
* binary_operator_spaces fixer
* Fix broken tests
* cast_spaces fixer
* concat_space fixer
* dir_constant fixer
* ereg_to_preg fixer
* function_typehint_space fixer
* hash_to_slash_comment fixer
* is_null fixer
* linebreak_after_opening_tag fixer
* lowercase_cast fixer
* magic_constant_casing fixer
* modernize_types_casting fixer
* native_function_casing fixer
* new_with_braces fixer
* no_alias_functions fixer
* no_blank_lines_after_class_opening fixer
* no_blank_lines_after_phpdoc fixer
* no_empty_comment fixer
* no_empty_phpdoc fixer
* no_empty_statement fixer
* no_extra_consecutive_blank_lines fixer
* no_leading_import_slash fixer
* no_leading_namespace_whitespace fixer
* no_mixed_echo_print fixer
* no_multiline_whitespace_around_double_arrow fixer
* no_multiline_whitespace_before_semicolons fixer
* no_php4_constructor fixer
* no_short_bool_cast fixer
* no_singleline_whitespace_before_semicolons fixer
* no_spaces_around_offset fixer
* no_trailing_comma_in_list_call fixer
* no_trailing_comma_in_singleline_array fixer
* no_unneeded_control_parentheses fixer
* no_unused_imports fixer
* no_useless_return fixer
* no_whitespace_before_comma_in_array fixer
* no_whitespace_in_blank_line fixer
* not_operator_with_successor_space fixer
* object_operator_without_whitespace fixer
* ordered_imports fixer
* php_unit_construct fixer
* php_unit_dedicate_assert fixer
* php_unit_fqcn_annotation fixer
* phpdoc_indent fixer
* phpdoc_no_access fixer
* phpdoc_no_empty_return fixer
* phpdoc_no_package fixer
* phpdoc_no_useless_inheritdoc fixer
* Fix broken tests
* phpdoc_return_self_reference fixer
* phpdoc_single_line_var_spacing fixer
* phpdoc_single_line_var_spacing fixer
* phpdoc_to_comment fixer
* phpdoc_trim fixer
* phpdoc_var_without_name fixer
* psr4 fixer
* self_accessor fixer
* short_scalar_cast fixer
* single_blank_line_before_namespace fixer
* single_quote fixer
* standardize_not_equals fixer
* ternary_operator_spaces fixer
* trailing_comma_in_multiline_array fixer
* trim_array_spaces fixer
* protected_to_private fixer
* unary_operator_spaces fixer
* whitespace_after_comma_in_array fixer
* `parent::setRules()` -> `$this->setRules()`
* blank_line_after_opening_tag fixer
* Update finder config.
* Revert changes for YiiRequirementChecker.
* Fix array formatting.
* Add missing import.
* Fix CS for new code merged from master.
* Fix some indentation issues.
|
7 years ago |
|
Alexander Makarov
|
a626440761
|
Reverted #13822, clarified exception descriptions
|
8 years ago |
Nikolay Oleynikov
|
7a2f04ae32
|
Fixes #13822: Fixed `yii\web\User::loginRequired()` to throw an `UnauthorizedHttpException` instead of a `ForbiddenHttpException`
|
8 years ago |
Carsten Brandt
|
c19b2f7dc8
|
release version 2.0.11
|
8 years ago |
|
Carsten Brandt
|
b8b3aeeb00
|
update deprecated phpdoc messages
|
8 years ago |
|
Robert Korulczyk
|
7a3a342127
|
Fix errors reported by apidoc extension. (#12986)
|
8 years ago |
Boudewijn Vahrmeijer
|
95f2c82009
|
Fixed the cryptic unstructured doc block (#12978) [skip ci]
|
8 years ago |
|
Robert Korulczyk
|
4aa935e69e
|
Fixes #12055: Changed `boolean` to `bool` and `integer` to `int` in phpdoc
|
8 years ago |
|
Carsten Brandt
|
11fe407ad0
|
release version 2.0.10
|
8 years ago |
Roman Grinyov
|
10462f1a81
|
Cosmetic changes
|
8 years ago |
Liam Davies
|
98b6851c41
|
Update User.php
A Few spelling corrections.
|
8 years ago |
Ilya Sevostyanov
|
91c67262ce
|
Fix typo (#11998) [skip ci]
|
8 years ago |
|
Alexander Makarov
|
c5b87fd932
|
Updated deprecation notice
|
8 years ago |
Sam Mousa
|
03e23adab8
|
Fixes #11679: Extracted `CheckAccessInterface` from `ManagerInterface`
|
8 years ago |
Nikola Kovacs
|
9d327baa8b
|
coding style fixes
|
8 years ago |
|
SilverFire - Dmitry Naumenko
|
38be74446e
|
Update PHPDoc, CHANGELOG, UPGRADE.md
|
8 years ago |
maine-mike
|
7249a6c99e
|
Move Identity Cookie code into separate functions
|
8 years ago |
|
SilverFire - Dmitry Naumenko
|
0ff6eeba7d
|
Enhanced 9f499eb: `yii\web\User::checkRedirectAcceptable()` removed check for "*" type (invalid in accept header)
|
8 years ago |
|
SilverFire - Dmitry Naumenko
|
9f499eb51e
|
Fixed `yii\web\User::checkRedirectAcceptable()` to treat acceptable content type `*/*` as `*`
Closes #11523
|
8 years ago |
dawei
|
5bd35c344c
|
dont set return url, if request method is not GET
|
9 years ago |
maine-mike
|
ad6047e09f
|
Fixes #10480: Fixed removing old identity cookie when loggin in as another user without logging out first
|
9 years ago |
|
SilverFire - Dmitry Naumenko
|
9a73593908
|
yii\web\User - updated PHPDoc
|
9 years ago |
|
Sam Mousa
|
c7436909f4
|
Added optional `$checkHeader` param to loginRequired for checking the Accept header; defaults to `true`.
Added changelog line.
Fixed DbSessionTest
Added version annotations.
Improvements to phpdoc and whitespace.
|
9 years ago |
|
SilverFire - Dmitry Naumenko
|
cd87d67f34
|
Global DOCS update: ~~~ replaced with ```
|
9 years ago |
|
Alexander Makarov
|
0712bad090
|
Fixes #9846: Fixed `yii\web\User::loginRequired()` should throw 401 not 403 (reverted from commit 4e715f9d65)
See https://github.com/yiisoft/yii2/issues/9846#issuecomment-146891825
|
9 years ago |
spikyjt@gmail.com
|
4e715f9d65
|
Fixes #9846: Fixed `yii\web\User::loginRequired()` should throw 401 not 403
|
9 years ago |
Kevin LEVRON
|
bc543db206
|
fix doc
|
9 years ago |
Alexander Kochetov
|
223b0bea5d
|
Fixes #9369: `Yii::$app->user->can()` now returns `false` instead of erroring in case `authManager` component is not configured
|
9 years ago |
|
Carsten Brandt
|
a2568d1ec8
|
updated some comments and `@since` annotations
|
9 years ago |
Sebastian Chojniak
|
025845e660
|
performance: unnecessary (when result is cached) getAuthManager() removed
|
9 years ago |
Alexander Mohorev
|
ae42a054bb
|
PSR-2 spaces, commas, etc
|
9 years ago |
|
Carsten Brandt
|
0802d3eb60
|
added more detailed comment for #8556
|
9 years ago |
|
Alexander Makarov
|
acb7b2ebbb
|
Fixes #8556: Extracted `yii\web\User::getAuthManager()` method
|
9 years ago |
Qiang Xue
|
0c599b1ee1
|
Fixes #5480: Added defensive code to `yii\web\User::getIdentity()` to avoid potential infinite recursion
|
10 years ago |
|
Alexander Makarov
|
e2b6cb69b0
|
Fixes #4889: Application was getting into redirect loop when user wasn't allowed accessing login page. Now shows 403
|
10 years ago |
|
Alexander Makarov
|
48ec791e4a
|
Fixes #5587: `json_encode` is now used with `JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE` where it makes sense, also it is now default for `Json::encode()`
|
10 years ago |
|
Qiang Xue
|
851d15380f
|
Fixes #5131: Added `$autoRenew` parameter to `yii\web\User::getIdentity()`
|
10 years ago |
|
Alexander Kochetov
|
090e550a3d
|
Rename `\yii\web\User` component param for consistency
|
10 years ago |
|
Qiang Xue
|
f3105f736a
|
Fixes #3283: Added `$checkAjax` to `yii\web\User::loginRequired()`
|
10 years ago |
|
Qiang Xue
|
0cdf2f5171
|
Fixed code break.
|
10 years ago |
|
Qiang Xue
|
dee0382c1f
|
Added `yii\base\InvalidValueException`.
Refactored `yii\web\User`.
|
10 years ago |
