Subversion Repositories oidplus

oidplus/trunk/includes/classes/OIDplusAuthContentStoreDummy.class.php @ 1300 – Rev 566

Rev 566 – 2021-05-14 16:07:03
Author: daniel-marschall
Log message:
Automated AJAX requests are now protected via a JWT, which is signed and doesn't contain the user's password anymore. The old method (username+password+antiBruteforceUnlockKey) is still accepted for backwards compatibility.
REMOVED: OIDplusSessionHandler->simulate
Created new class "OIDplusAuthContentStore" to make "OIDplusAuthUtils" more flexible

Path	Blame	Diff	Log
/trunk/3p/php-jwt/
/trunk/3p/php-jwt/BeforeValidException.php
/trunk/3p/php-jwt/ExpiredException.php
/trunk/3p/php-jwt/JWK.php
/trunk/3p/php-jwt/JWT.php
/trunk/3p/php-jwt/LICENSE
/trunk/3p/php-jwt/SignatureInvalidException.php
/trunk/3p/_overview
/trunk/doc/config_values.txt
/trunk/doc/developer_notes/class_diagram.drawio
/trunk/doc/developer_notes/class_diagram.png
/trunk/doc/developer_notes/SERVER_SECRET.txt
/trunk/includes/classes/OIDplusAuthContentStore.class.php
/trunk/includes/classes/OIDplusAuthContentStoreDummy.class.php
/trunk/includes/classes/OIDplusAuthContentStoreJWT.class.php
/trunk/includes/classes/OIDplusAuthContentStoreSession.class.php
/trunk/includes/classes/OIDplusAuthUtils.class.php
/trunk/includes/classes/OIDplusSessionHandler.class.php
/trunk/includes/oidplus.inc.php
/trunk/plugins/adminPages/910_automated_ajax_calls/OIDplusPageAdminAutomatedAJAXCalls.class.php
/trunk/plugins/language/dede/messages.xml
/trunk/plugins/publicPages/810_login_google/oauth.php
/trunk/plugins/raPages/910_automated_ajax_calls/OIDplusPageRaAutomatedAJAXCalls.class.php
/trunk/res/OIDplus/acknowledgements$dede.html
/trunk/res/OIDplus/acknowledgements.html
/trunk/TODO