Subversion Repositories oidplus

Rev

Go to most recent revision | Show changed files | Details | Compare with Previous | Blame | RSS feed

Filtering Options

Rev Age Author Path Log message Diff
585 2021-05-23 17:36:08 daniel-marschall /trunk/ Very large refactoring of login methods; JWT methods encapsulated
"Remember me" (JWT cookie) and regular logins (PHP session) cannot be mixed anymore (which didn't work anyway)
 
579 2021-05-17 17:51:20 daniel-marschall /trunk/ Login "remember me" feature (using JWT authentication)  
578 2021-05-17 01:27:25 daniel-marschall /trunk/ JWT authentication security improvements  
577 2021-05-16 21:28:47 daniel-marschall /trunk/ JWT cosmetics  
576 2021-05-16 20:24:19 daniel-marschall /trunk/ Small improvements to JWT authentication. Renamed "NBF" to "Blacklisted" to avoid confusion  
575 2021-05-16 11:55:28 daniel-marschall /trunk/ Security fix  
574 2021-05-16 03:04:22 daniel-marschall /trunk/ NEW: JWT tokens of Automated AJAX calls can now be blacklisted
REMOVED: Automated AJAX calls using "batch_username" arguments
 
572 2021-05-15 21:50:39 daniel-marschall /trunk/ Added possibility to disable JWT token authentication in the base configuration  
566 2021-05-14 16:07:03 daniel-marschall /trunk/ Automated AJAX requests are now protected via a JWT, which is signed and doesn't contain the user's password anymore. The old method (username+password+antiBruteforceUnlockKey) is still accepted for backwards compatibility.
REMOVED: OIDplusSessionHandler->simulate
Created new class "OIDplusAuthContentStore" to make "OIDplusAuthUtils" more flexible
 
565 2021-05-13 22:08:23 daniel-marschall /trunk/plugins/ Security: Google OAuth Security Token (JWT) is now verified (optional)  
563 2021-05-09 20:32:36 daniel-marschall /trunk/ OAuth plugins display warning if SameSite policy is "Strict". A different approach follows later. (BUG#0000213)  
561 2021-04-28 19:45:58 daniel-marschall /trunk/ Refactoring of JavaScript code (using AJAX instead of document.getElementByxxx), and other small fixes  
554 2021-04-23 17:00:34 daniel-marschall /trunk/ Fixed bug in WebSVN Updater (files with spaces, e.g. "Internet Draft.url" were written with 0 bytes)
Fixed error handling in WebSVN updater
 
553 2021-04-23 12:20:17 daniel-marschall /trunk/  
552 2021-04-23 00:31:59 daniel-marschall /trunk/  
550 2021-04-21 22:11:50 daniel-marschall /trunk/plugins/ JavaScript code improvements  
538 2021-04-10 23:20:47 daniel-marschall /trunk/  
535 2021-03-27 16:00:38 daniel-marschall /trunk/plugins/ Small improvements for plugin "system file check"  
533 2021-03-26 22:44:46 daniel-marschall /trunk/ New plugin: System file check  
532 2021-03-23 23:15:07 daniel-marschall /trunk/ WebSVN update moved from "update/" into admin login area
New plugin: "VNag version check" (in admin login area)
Discontinued: "File completeness check" tool (will be replaced soon)
 

Show All