Subversion Repositories oidplus

Rev

Show changed files | Details | Compare with Previous | Blame | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
1444 2023-12-25 23:21:02 daniel-marschall /trunk/ Login with two users simultanously is now possible again.
REST API Objects Endpoint: Added output field "children".
REST API Objects Endpoint: PUT and POST works again.
 
1367 2023-08-01 23:50:51 daniel-marschall /trunk/ Minor changes  
1345 2023-07-30 00:06:21 daniel-marschall /trunk/ Introduced setting XFF_TRUSTED_PROXIES which allows whitelisting proxies of which their HTTP_X_FORWARDED_FOR to determine the IP address of the web-visitor.  
1321 2023-06-25 01:15:07 daniel-marschall /trunk/ Documentation update / included oidplus.com copy to SVN  
1318 2023-06-24 16:03:12 daniel-marschall /trunk/includes/classes/  
1317 2023-06-24 16:01:15 daniel-marschall /trunk/ Various bugfixes. Changed JWT audience (users will be logged out once).  
1315 2023-06-23 23:27:24 daniel-marschall /trunk/includes/classes/  
1314 2023-06-23 15:57:27 daniel-marschall /trunk/ Fixes in re JWT  
1312 2023-06-21 00:13:45 daniel-marschall /trunk/ Added base config settings JWT_FIXED_IP_USER and JWT_FIXED_IP_ADMIN to increase security.
Default values of JWT_TTL_LOGIN_USER and JWT_TTL_LOGIN_ADMIN has been changed from 10 years to 30 days.
 
1310 2023-06-20 00:08:38 daniel-marschall /trunk/includes/classes/ Small change to JWT  
1308 2023-06-18 23:44:45 daniel-marschall /trunk/  
1307 2023-06-18 22:51:36 daniel-marschall /trunk/  
1306 2023-06-18 20:01:33 daniel-marschall /trunk/ Code improvements in re JWT  
1305 2023-06-18 16:17:39 daniel-marschall /trunk/ Simplified web browser login: Regular "PHP Session login" was removed and replaced by JWT cookie login (previously known as "remember me").
If you had previously disabled JWT_ALLOW_LOGIN_USER or JWT_ALLOW_LOGIN_ADMIN, please enable them again.
JWT tokens now contain registered claims (OIDs).
 
1303 2023-06-13 01:59:05 daniel-marschall /trunk/  
1301 2023-06-01 00:04:36 daniel-marschall /trunk/ Simplified OIDplusAuthContentStore* classes  
1300 2023-05-30 01:04:00 daniel-marschall /trunk/  
1298 2023-05-30 00:06:43 daniel-marschall /trunk/ Security Feature: JWT token can now be invalidated by changing the Server Secret (in the base configuration). The update invalidates all JWT once. You need to log-in again.  
1283 2023-05-18 21:50:11 daniel-marschall /trunk/ makeAuthKey and validateAuthKey can now be used to make temporary keys with limited lifetime.
makeAuthKey and makeSecret now accept array inputs
 
1282 2023-05-18 00:23:38 daniel-marschall /trunk/ Plugins can no longer access the SERVER_SECRET base configuration settings through OIDplusBaseConfig. Instead, makeAuthKey and makeSecret must be used. The bundled plugins are already updated.  

Show All