Subversion Repositories oidplus

Rev

Go to most recent revision | Show changed files | Directory listing | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
587 2021-05-23 17:39:47 daniel-marschall /trunk/  
586 2021-05-23 17:39:27 daniel-marschall /trunk/doc/developer_notes/  
585 2021-05-23 17:36:08 daniel-marschall /trunk/ Very large refactoring of login methods; JWT methods encapsulated
"Remember me" (JWT cookie) and regular logins (PHP session) cannot be mixed anymore (which didn't work anyway)
 
584 2021-05-23 16:50:24 daniel-marschall /trunk/plugins/adminPages/130_create_ra/ Fixed "Create RA manually" plugin in admin login area  
583 2021-05-22 11:32:35 daniel-marschall /trunk/ Added JWT TTL (time to live) config value  
582 2021-05-17 22:41:55 daniel-marschall /trunk/plugins/ Automated AJAX calls: Added Python example  
581 2021-05-17 22:41:35 daniel-marschall /trunk/ Privacy documentation  
580 2021-05-17 19:23:50 daniel-marschall /trunk/ Cookies now get the "secure" flag if OIDplus is visited from HTTPS connection  
579 2021-05-17 17:51:20 daniel-marschall /trunk/ Login "remember me" feature (using JWT authentication)  
578 2021-05-17 01:27:25 daniel-marschall /trunk/ JWT authentication security improvements  
577 2021-05-16 21:28:47 daniel-marschall /trunk/ JWT cosmetics  
576 2021-05-16 20:24:19 daniel-marschall /trunk/ Small improvements to JWT authentication. Renamed "NBF" to "Blacklisted" to avoid confusion  
575 2021-05-16 11:55:28 daniel-marschall /trunk/ Security fix  
574 2021-05-16 03:04:22 daniel-marschall /trunk/ NEW: JWT tokens of Automated AJAX calls can now be blacklisted
REMOVED: Automated AJAX calls using "batch_username" arguments
 
573 2021-05-15 22:22:16 daniel-marschall /trunk/  
572 2021-05-15 21:50:39 daniel-marschall /trunk/ Added possibility to disable JWT token authentication in the base configuration  
571 2021-05-15 21:17:51 daniel-marschall /trunk/ OIDplusConfigInterface renamed to OIDplusGetterSetterInterface
Improved OIDplus class autoloader (supports namespaces)
 
570 2021-05-15 17:00:51 daniel-marschall /trunk/ Security: JWTs are now signed using RSA if OpenSSL is available.
Security: If not, then the key of JWT (which is the server secret) is processed via PBKDF2
 
569 2021-05-15 16:00:35 daniel-marschall /trunk/ OOP  
568 2021-05-15 12:40:35 daniel-marschall /trunk/plugins/ Automated AJAX: Updated examples to JWT token  

Show All