summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch '2.2' into 2.3Fabien Potencier2013-09-062-1/+7
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Fixing singular form for kisses, accesses and addresses. fixed some circular references [Security] fixed a leak in ExceptionListener [Security] fixed a leak in the ContextListener Ignore posix_istatty warnings typos [HttpKernel] fixed route parameters storage in the Request data collector (closes #8867) Return BC compatibility for `@Route` parameters and default values Conflicts: src/Symfony/Bundle/FrameworkBundle/Templating/Helper/FormHelper.php src/Symfony/Component/Console/Application.php
| * [Security] fixed a leak in ExceptionListenerFabien Potencier2013-09-061-0/+4
| |
| * [Security] fixed a leak in the ContextListenerFabien Potencier2013-09-061-1/+3
| |
* | Merge branch '2.2' into 2.3Fabien Potencier2013-08-301-2/+2
|\ \ | |/ | | | | | | | | | | | | * 2.2: [Security] fixed some phpdoc Fixed PHPDoc Blocks optimized circular reference checker [HttpKernel] changed fragment URLs to be relative by default (closes #8458)
| * [Security] fixed some phpdocFabien Potencier2013-08-301-2/+2
| |
* | Merge branch '2.2' into 2.3v2.3.4Fabien Potencier2013-08-271-4/+6
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | * 2.2: bumped Symfony version to 2.2.7 updated VERSION for 2.2.6 update CONTRIBUTORS for 2.2.6 updated CHANGELOG for 2.2.6 clearToken exception is thrown at wrong place. Conflicts: src/Symfony/Component/HttpKernel/Kernel.php
| * clearToken exception is thrown at wrong place.v2.2.6Xavier HAUSHERR2013-08-261-4/+6
| |
* | Merge branch '2.2' into 2.3Fabien Potencier2013-08-221-0/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: [Locale] fixed build-data exit code in case of an error fixed request format of sub-requests when explicitely set by the developer (closes #8787) Sets _format attribute only if it wasn't set previously by the user. Exclude little words of 'ee' to 'oo' plural transformation fixed the format of the request used to render an exception Fix typo in the check_path validator added a missing use statement (closes #8808) fix for Process:isSuccessful() Conflicts: UPGRADE-3.0.md src/Symfony/Component/Locale/Resources/data/build-data.php
| * added a missing use statement (closes #8808)Fabien Potencier2013-08-211-0/+1
| |
* | Merge branch '2.2' into 2.3Fabien Potencier2013-08-131-1/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: corrected English grammar (s/does not exists/does not exist) [Process] Add more precision to Process::stop timeout [Process] Avoid zombie process in case of unit tests failure [Process] Fix #8739 [Process] Add failing test for #8739 [Process] Fix CS Fixed documentation grammar for AuthenticationManagerInterface::authenticate() [Validator] fixed the wrong isAbstract() check against the class (fixed #8589) [TwigBridge] Prevent code extension to display warning Use strstr instead of strpos Conflicts: src/Symfony/Component/Finder/Shell/Command.php src/Symfony/Component/Process/Process.php
| * Fixed documentation grammar for AuthenticationManagerInterface::authenticate()Jaik Dean2013-08-131-1/+1
| |
* | Merge branch '2.2' into 2.3v2.3.3Fabien Potencier2013-08-062-0/+0
|\ \ | |/ | | | | | | * 2.2: fix some file mode bug 755->644
| * fix some file mode bug 755->644v2.2.5bronze1man2013-08-062-0/+0
| |
* | Merge branch '2.2' into 2.3Fabien Potencier2013-08-021-0/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: [HttpKernel] added a missing dep for dev [Form] fixed wrong call to setTimeZone() (closes #8644) Fix issue with \DateTimeZone::UTC / 'UTC' for PHP 5.4 [Form] Removed the "disabled" attribute from the placeholder option in select fields due to problems with the BlackBerry 10 browser [routing] added ability for apache matcher to handle array values removed dead code and fixed CS [Validator] fixed StaticMethodLoader trying to invoke methods of abstract classes (closes #8589) Conflicts: src/Symfony/Bundle/TwigBundle/TokenParser/RenderTokenParser.php src/Symfony/Component/Form/FormConfigBuilder.php src/Symfony/Component/HttpKernel/composer.json src/Symfony/Component/Validator/Tests/GraphWalkerTest.php
| * removed dead code and fixed CSFabien Potencier2013-07-281-0/+1
| |
* | Added missing files .gitignoreMartin Hasoň2013-07-211-1/+0
| |
* | Merge branch '2.2' into 2.3Fabien Potencier2013-07-207-6/+466
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | * 2.2: [PropertyAccess] added moves to pluralMap [Security] fixed issue where authentication listeners clear unrelated tokens fix issue #8499 modelChoiceList call getPrimaryKey on a non object [DependencyInjection] Add exception for service name not dumpable in PHP Conflicts: src/Symfony/Component/DependencyInjection/Dumper/PhpDumper.php src/Symfony/Component/DependencyInjection/Tests/Dumper/PhpDumperTest.php src/Symfony/Component/Security/Tests/Http/Firewall/BasicAuthenticationListenerTest.php
| * [Security] fixed issue where authentication listeners clear unrelated tokensalcaeus2013-07-197-6/+466
| | | | | | | | | | This commit fixes an issue where authentication listeners clear all security tokens in case of authentication failure. This behavior makes it impossible to combine certain authentication mechanisms, notably x509 with form-based login.
* | added greek translationlancergr2013-07-191-0/+71
| |
* | Merge branch '2.2' into 2.3v2.3.2Fabien Potencier2013-07-111-1/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Reverts JSON_NUMERIC_CHECK Just a Typo [Yaml] removed wrong comment removal inside a string block Fixing configuration validation error messages. [HtppKernel] fixed inline fragment renderer fixed inline fragment renderer ProgressHelper shows percentage complete. Comment fixed: RedrawFrequency is measured in steps. fix handling of a default 'template' as a string Conflicts: src/Symfony/Component/Console/Helper/ProgressHelper.php src/Symfony/Component/Console/Tests/Helper/ProgressHelperTest.php src/Symfony/Component/HttpKernel/Tests/Fragment/HIncludeFragmentRendererTest.php src/Symfony/Component/HttpKernel/Tests/Fragment/InlineFragmentRendererTest.php
| * Just a Typov2.2.4Moritz Borgmann2013-07-111-1/+1
| |
* | fixed CSFabien Potencier2013-07-011-7/+7
| |
* | [Security] fixed usage of the salt for the bcrypt encoder (refs #8210)Fabien Potencier2013-06-131-1/+11
| |
* | [Security] Added few new test cases for the HttpUtils and improved ↵v2.3.1Jakub Zalas2013-06-021-18/+127
| | | | | | | | readability of existing tests.
* | [Security] Added tests for the SwitchUserListener.Jakub Zalas2013-06-021-0/+175
| |
* | [Security] Added tests for the ContextListener.Jakub Zalas2013-06-021-7/+75
| |
* | [Security] Added a test to the BasicAuthenticationListener.Jakub Zalas2013-06-021-0/+14
| |
* | [Security] Removed an unnecessary call to sprintf() and added a test case.Jakub Zalas2013-06-022-1/+18
| |
* | Merge branch '2.2' into 2.3v2.3.0Fabien Potencier2013-05-271-1/+1
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | * 2.2: Fix several instances of doubled words [Finder] Fix iteration fails with non-rewindable streams [Finder] Fix unexpected duplicate sub path related AppendIterator issue Added type of return value in VoterInterface. Fixed two bugs in HttpCache Conflicts: src/Symfony/Component/Finder/Iterator/RecursiveDirectoryIterator.php
| * Merge branch '2.1' into 2.2v2.2.3v2.2.2Fabien Potencier2013-05-271-1/+1
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: Fix several instances of doubled words [Finder] Fix iteration fails with non-rewindable streams [Finder] Fix unexpected duplicate sub path related AppendIterator issue Added type of return value in VoterInterface. Fixed two bugs in HttpCache Conflicts: src/Symfony/Component/Finder/Tests/FinderTest.php
| | * Added type of return value in VoterInterface.v2.1.12v2.1.11Rich Sage2013-05-231-1/+1
| | |
* | | [Security] Fixed the check if an interface exists.Jakub Zalas2013-05-261-1/+1
| | |
* | | [Security] Added tests for the DefaultLogoutSuccessHandler.Jakub Zalas2013-05-253-2/+48
| | |
* | | [Security] Added tests for the DefaultAuthenticationSuccessHandler.Jakub Zalas2013-05-241-0/+173
| | |
* | | [Security] Added tests for the DefaultAuthenticationFailureHandler.Jakub Zalas2013-05-241-0/+182
| | |
* | | [Security] Added tests for the remember me ReponseListener.Jakub Zalas2013-05-241-0/+92
| | |
* | | [Security] Added tests for the SessionAuthenticationStrategy.Jakub Zalas2013-05-241-0/+80
| | |
* | | [Security] Added tests for the AccessMap.Jakub Zalas2013-05-241-0/+58
| | |
* | | removed versions in composer.json filesFabien Potencier2013-05-131-6/+6
| | |
* | | changed all version deps to accepts all upcoming Symfony versionsFabien Potencier2013-05-131-4/+4
| | |
* | | [Security] Disabled the BCryptPasswordEncoder tests for PHP versions lower ↵Jakub Zalas2013-05-102-1/+22
| | | | | | | | | | | | | | | | | | than 5.3.7. See https://github.com/ircmaxell/password_compat/issues/10#issuecomment-11203833.
* | | Merge branch '2.2'Fabien Potencier2013-05-061-2/+2
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: added additional tests to cover invalid argument exceptions in OutputFormatterStyle component added a missing check for the provider key [Validator] fixed wrong URL for XSD [Validator] Fixed: $traverse and $deep is passed to the visitor from Validator::validate() [Form] Fixed transform()/reverseTransform() to always throw TransformationFailedExceptions [Form] Fixed: String validation groups are never interpreted as callbacks if the repository method returns an array ensure that it's internal poin... [Form] Improved multi-byte handling of NumberToLocalizedStringTransformer Fix wrong method in findTaggedServiceIds(), add example to docblock. Conflicts: src/Symfony/Component/Form/Extension/Core/DataTransformer/ChoicesToBooleanArrayTransformer.php src/Symfony/Component/Form/Extension/Validator/Constraints/FormValidator.php
| * | Merge branch '2.1' into 2.2Fabien Potencier2013-05-061-2/+2
| |\ \ | | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: added additional tests to cover invalid argument exceptions in OutputFormatterStyle component added a missing check for the provider key [Validator] fixed wrong URL for XSD [Form] Fixed transform()/reverseTransform() to always throw TransformationFailedExceptions [Form] Fixed: String validation groups are never interpreted as callbacks if the repository method returns an array ensure that it's internal poin... Fix wrong method in findTaggedServiceIds(), add example to docblock. Conflicts: src/Symfony/Bridge/Doctrine/Form/DataTransformer/CollectionToArrayTransformer.php src/Symfony/Component/Form/Extension/Core/DataTransformer/DataTransformerChain.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/ArrayToPartsTransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/ChoiceToValueTransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/ChoicesToValuesTransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/DateTimeToArrayTransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/DateTimeToRfc3339TransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/IntegerToLocalizedStringTransformerTest.php src/Symfony/Component/Form/Tests/Extension/Core/DataTransformer/ValueToDuplicatesTransformerTest.php
| | * added a missing check for the provider keyv2.1.10Fabien Potencier2013-05-051-2/+2
| | |
| | * added missing license blocksFabien Potencier2013-04-221-0/+9
| | |
* | | Fix http-kernel dep in symfony/securityIgor Wiedler2013-04-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | The current constraint will not match 2.3.x-dev and cause edge cases where either: * composer falls back to symfony/symfony because it cannot find a match * composer installs 2.2 versions of http-kernel and http-foundation
* | | [Security] added an exception when the BCrypt encoder cannot be used (refs ↵Fabien Potencier2013-04-261-0/+4
| | | | | | | | | | | | #7853)
* | | [Security] added more info about the BCrypt change (refs #7853)Fabien Potencier2013-04-261-0/+2
| | |
* | | [Security] tweaked previous commitFabien Potencier2013-04-252-7/+6
| | |
* | | Outsource all the BCrypt heavy lifting to a libraryElnur Abdurrakhimov2013-04-253-150/+14
| | |
* | | Added a DoktrineTokenProvider in Security/Bridge/Doctrine/security/RememberMeTerje Bråten2013-04-211-2/+3
| | |
* | | Fixed typosPascal Borreli2013-04-212-4/+4
| | |
* | | Merge branch '2.2'Fabien Potencier2013-04-171-1/+1
|\ \ \ | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Fix default value handling for multi-value options [HttpKernel] truncate profiler token to 6 chars (see #7665) Disabled APC on Travis for PHP 5.5+ as it is not available [HttpFoundation] do not use server variable PATH_INFO because it is already decoded and thus symfony is fragile to double encoding of the path Fix download over SSL using IE < 8 and binary file response [Console] Fix merging of application definition, fixes #7068, replaces #7158 [HttpKernel] fixed the Kernel when the ClassLoader component is not available (closes #7406) fixed output of bag values [Yaml] improved boolean naming ($notEOF -> !$EOF) [Yaml] fixed handling an empty value [Routing][XML Loader] Add a possibility to set a default value to null [Console] fixed handling of "0" input on ask The /e modifier for preg_replace() is deprecated in PHP 5.5; replace with preg_replace_callback() fixed handling of "0" input on ask [HttpFoundation] Fixed bug in key searching for NamespacedAttributeBag [Form] DateTimeToRfc3339Transformer use proper transformation exteption in reverse transformation Update PhpEngine.php [PropertyAccess] Add objectives to pluralMap [Security] Removed unused var [HttpFoundation] getClientIp is fixed. Conflicts: src/Symfony/Component/Console/Tests/Command/CommandTest.php src/Symfony/Component/Console/Tests/Input/ArgvInputTest.php src/Symfony/Component/HttpFoundation/Request.php src/Symfony/Component/HttpKernel/Kernel.php
| * | merged branch lyrixx/path-10 (PR #7597)Fabien Potencier2013-04-081-1/+1
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 2.2 branch. Discussion ---------- [Security] Removed unused var | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | I guess | Fixed tickets | - Commits ------- bd26419 [Security] Removed unused var
| | * | [Security] Removed unused varGrégoire Pineau2013-03-281-1/+1
| | | |
* | | | merged branch Brammm/master (PR #7601)Fabien Potencier2013-04-091-51/+56
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Discussion ---------- [Security] [Acl] [BasicPermissionMap] Made $map protected and moved it to __construct | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | | License | MIT | Doc PR | By making $map protected and moving it to the construct, you can simply extend the BasicPermissionMap class if you want to simply add some extra permissions. In it's current form, you have to copy/paste the entire array AND the getMasks and contains functions.  Commits ------- 1369d54 Made $map protected and moved it to construct.
| * | | | Made $map protected and moved it to construct.Bram Van der Sype2013-04-081-51/+56
| | | | | | | | | | | | | | | By making $map protected and moving it to the construct, you can simply extend the BasicPermissionMap class if you want to simply add some extra permissions. In it's current form, you have to copy/paste the entire array AND the getMasks and contains functions. 
* | | | | merged branch elnur/chain-user-provider-getter (PR #7077)Fabien Potencier2013-04-091-0/+8
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Discussion ---------- [2.3] [Security] Add a getter for providers to the ChainUserProvider class | Q | A | ------------- | --- | Bug fix? | no | New feature? | yes | BC breaks? | no | Deprecations? | no | Tests pass? | yes I've got a use case where I need to check if any of the chained user providers implement a particular interface. This getter would really help with that. Commits ------- 0a82d73 Add a getter for providers to the ChainUserProvider class
| * | | | Add a getter for providers to the ChainUserProvider classElnur Abdurrakhimov2013-02-151-0/+8
| | | | |
* | | | | Merge branch '2.2'Fabien Potencier2013-04-072-1/+22
|\ \ \ \ \ | | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Fix finding ACLs from ObjectIdentity's with different types [HttpKernel] tweaked previous merge #7531: [HttpKernel][Config] FileLocator adds NULL as global resource path Fix autocompletion of command names when namespaces conflict Fix timeout in Process::stop method fixed CS Round stream_select fifth argument up. Fix Process timeout [HttpKernel] Remove args from 5.3 stack traces to avoid filling log files, fixes #7259 bumped Symfony version to 2.2.2-DEV updated VERSION for 2.2.1 updated CHANGELOG for 2.2.1 Fixed phpdoc blocks to show that $uri can be passed as a string or ControllerReference (rather than just as a string) [HttpFoundation] Fixed copy pasted comment from FlashBag in AttributeBag [FrameworkBundle] fixed the discovery of the PHPUnit configuration file when using aggregate options like in -vc app/ (closes #7562) [WebProfilerBundle] removed next pointer class in a template fix overwriting of request's locale if attribute _locale is missing Conflicts: src/Symfony/Component/HttpKernel/Debug/ErrorHandler.php src/Symfony/Component/HttpKernel/EventListener/LocaleListener.php src/Symfony/Component/HttpKernel/Kernel.php
| * | | | Fix finding ACLs from ObjectIdentity's with different typesSamuel Gordalina2013-04-072-1/+22
| | | | |
* | | | | [CS Fix] Consistent coding-style of concatenation operator usageDariusz Górecki2013-04-024-9/+9
| | | | |
* | | | | fixed doc references (closes #7515)Fabien Potencier2013-04-011-1/+1
| | | | |
* | | | | Merge branch '2.2'Fabien Potencier2013-04-012-4/+5
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: (22 commits) fixed doc references (closes #7515) fixed doc references (closes #7515) On OS X, sys_get_tmp_dir() returns /var/private/..., which really is below /private/var. Doctrine cannot handle bare random non-utf8 strings small changes [SecurityBundle] Fixed configuration exemple idAsIndex should be true with a smallint or bigint id field. [PropertyAccess] Remove trailing periods from doc blocks Fix param docs for PropertyAccessor read method Fixed long multibyte parameter logging in DbalLogger:startQuery Keep the file extension in the temporary copy and test that it exists (closes #7482) bumped Symfony version to 2.1.10-DEV [Validator][translation][japanese]replaced period to japanese one [Validator][translation][japanese]fixed japanese translation to more practical one [Validator][translation][japanese]fixed message ordering to be consistent with other languages [Validator][translation][japanese]added new validation messages in japanese translation updated VERSION for 2.1.9 update CONTRIBUTORS for 2.1.9 updated CHANGELOG for 2.1.9 [Security] fixed wrong interface Remove already defined arguments Add missing use [FrameworkBundle] Reuse definition variable in FormPass ... Conflicts: src/Symfony/Bridge/Doctrine/Logger/DbalLogger.php src/Symfony/Bundle/WebProfilerBundle/Resources/views/Collector/config.html.twig
| * | | | fixed doc references (closes #7515)v2.2.1Fabien Potencier2013-04-011-1/+1
| | | | |
| * | | | merge branch '2.1' into 2.2Fabien Potencier2013-04-011-1/+1
| |\ \ \ \ | | | |_|/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: fixed doc references (closes #7515) small changes [SecurityBundle] Fixed configuration exemple idAsIndex should be true with a smallint or bigint id field. Fixed long multibyte parameter logging in DbalLogger:startQuery Keep the file extension in the temporary copy and test that it exists (closes #7482) [Validator][translation][japanese]replaced period to japanese one [Validator][translation][japanese]fixed japanese translation to more practical one [Validator][translation][japanese]fixed message ordering to be consistent with other languages [Validator][translation][japanese]added new validation messages in japanese translation Conflicts: src/Symfony/Component/Validator/Resources/translations/validators.ja.xlf
| | * | | fixed doc references (closes #7515)Fabien Potencier2013-04-011-1/+1
| | | | |
| * | | | Doctrine cannot handle bare random non-utf8 stringsTerje Bråten2013-03-311-3/+3
| | | | |
| * | | | [Security] fixed wrong interfaceFabien Potencier2013-03-261-1/+1
| | | | |
| * | | | Add missing useXavier HAUSHERR2013-03-261-0/+1
| | | | |
* | | | | [Security] Return 401 when using use_forward for form authenticationGunnar Lium2013-03-233-3/+12
| | | | |
* | | | | [Security] added missing entry to the CHANGELOGFabien Potencier2013-03-231-0/+5
| | | | |
* | | | | merged branch adrienbrault/security-feature (PR #4776)Fabien Potencier2013-03-231-1/+9
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Discussion ---------- [2.2] [Security] Add an option to disable the hasPreviousSession() check in AbstractAuthenticationListener Bug fix: no Feature addition: yes Backwards compatibility break: no Symfony2 tests pass: [![Build Status](https://secure.travis-ci.org/adrienbrault/symfony.png?branch=security-feature)](http://travis-ci.org/adrienbrault/symfony) Fixes the following tickets: #3703 Todo: Add this option to the symfony doc security configuration reference License of the code: MIT Documentation PR: N/A As stated in #3703, all authentication listeners that inherit from AbstractAuthenticationListener, only work when a previous session has been created. This PR allows to change the default behavior in the security.yml file. Example: ```yml security: firewalls: secured_area: pattern: ^/demo/secured/ form_login: check_path: /demo/secured/login_check login_path: /demo/secured/login require_previous_session: false # The default value is true logout: path: /demo/secured/logout target: /demo/ #anonymous: ~ #http_basic: # realm: "Secured Demo Area" ``` PS: While removing my old commit, it closed the #4774 PR ... Commits ------- 0562463 [Security] Add an option to disable the hasPreviousSession() check in AbstractAuthenticationListener
| * | | | | [Security] Add an option to disable the hasPreviousSession() check in ↵Adrien BRAULT2012-07-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | AbstractAuthenticationListener
* | | | | | [Security] removed deprecated classesFabien Potencier2013-03-232-58/+0
| | | | | |
* | | | | | Merge branch '2.2'Fabien Potencier2013-03-203-5/+27
|\ \ \ \ \ \ | | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: (70 commits) change wrapped exception message to be more usefull updated VERSION for 2.0.23 update CONTRIBUTORS for 2.0.23 updated CHANGELOG for 2.0.23 [Form] fixed failing test [DomCrawler] added support for query string with slash Fixed invalid file path for hiddeninput.exe on Windows. fix xsd definition for strict-requirements [WebProfilerBundle] Fixed the toolbar styles to apply them in IE8 [ClassLoader] fixed heredocs handling fixed handling of heredocs Add a public modifier to an interface method removing xdebug extension [HttpRequest] fixes Request::getLanguages() bug [HttpCache] added a test (cached content should be kept after purging) [DoctrineBridge] Fixed non-utf-8 recognition [Security] fixed HttpUtils class tests replaced new occurences of 'Request::create()' with '::create()' changed sub-requests creation to '::create()' fixed merge issue ... Conflicts: src/Symfony/Bundle/FrameworkBundle/Command/TranslationUpdateCommand.php src/Symfony/Bundle/WebProfilerBundle/Resources/views/Profiler/toolbar.html.twig src/Symfony/Component/DomCrawler/Link.php src/Symfony/Component/Translation/Translator.php
| * | | | | Merge branch '2.1' into 2.2Fabien Potencier2013-03-192-5/+5
| |\ \ \ \ \ | | | |/ / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: Add a public modifier to an interface method [HttpRequest] fixes Request::getLanguages() bug [HttpCache] added a test (cached content should be kept after purging) [DoctrineBridge] Fixed non-utf-8 recognition [Security] fixed HttpUtils class tests
| | * | | | Add a public modifier to an interface methodv2.1.9Elnur Abdurrakhimov2013-03-181-1/+1
| | | | | |
| | * | | | [Security] fixed HttpUtils class testsJean-François Simon2013-03-151-4/+4
| | | | | |
| * | | | | Merge branch '2.1' into 2.2Fabien Potencier2013-03-151-1/+1
| |\ \ \ \ \ | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: changed sub-requests creation to '::create()' Conflicts: src/Symfony/Bundle/FrameworkBundle/HttpKernel.php src/Symfony/Component/Security/Http/HttpUtils.php
| | * | | | changed sub-requests creation to '::create()'Jean-François Simon2013-03-151-1/+1
| | | | | |
| * | | | | fixed merge issueFabien Potencier2013-03-151-1/+1
| | | | | |
| * | | | | Merge branch '2.1' into 2.2Fabien Potencier2013-03-152-4/+26
| |\ \ \ \ \ | | |/ / / / | | | | | / | | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: sub-requests are now created with the same class as their parent [FrameworkBundle] removed BC break [FrameworkBundle] changed temp kernel name in cache:clear [DoctrineBridge] Avoids blob values to be logged by doctrine [Security] use current request attributes to generate redirect url? [Validator] fix showing wrong max file size for upload errors [TwigBridge] removed double var initialization (refs #7344) [2.1][TwigBridge] Fixes Issue #7342 in TwigBridge [FrameworkBundle] fixed cahe:clear command's warmup [TwigBridge] now enter/leave scope on Twig_Node_Module [TwigBridge] fixed fixed scope & trans_default_domain node visitor [TwigBridge] fixed non probant tests & added new one [BrowserKit] added ability to ignored malformed set-cookie header [Translation] removed wriong 'use' [Translation] added xliff loader/dumper with resname support [TwigBridge] fixes Conflicts: src/Symfony/Bundle/FrameworkBundle/HttpKernel.php src/Symfony/Component/Security/Http/HttpUtils.php src/Symfony/Component/Translation/Loader/XliffFileLoader.php src/Symfony/Component/Translation/Tests/Loader/XliffFileLoaderTest.php
| | * | | sub-requests are now created with the same class as their parentJean-François Simon2013-03-141-1/+1
| | | | |
| | * | | [Security] use current request attributes to generate redirect url?Jean-François Simon2013-03-132-5/+27
| | | | |
* | | | | Merge branch '2.2'Fabien Potencier2013-03-061-1/+1
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: (26 commits) [FrameworkBundle] Fixes invalid serialized objects in cache remove dead code in yaml component Fixed typo in UPGRADE-2.2 fixed typo RedisProfilerStorage wrong db-number/index-number selected [DependencyInjection] added a test for the previous merge (refs #7261) Unset loading[$id] in ContainerBuilder on exception Default validation message translation fix. remove() should not use deprecated getParent() so it does not trigger deprecation internally adjust routing tests to not use prefix in addCollection add test for uniqueness of resources added tests for addDefaults, addRequirements, addOptions adjust RouteCollectionTest for the addCollection change and refactor the tests to only skip the part that really needs the config component added tests for remove() that wasnt covered yet and special route name refactor interator test that was still assuming a tree adjust tests to no use addPrefix with options adjusted tests to not use RouteCollection::getPrefix [Routing] trigger deprecation warning for deprecated features that will be removed in 2.3 [Console] fixed StringInput binding [Console] added string input test ...
| * | | | merged branch pborreli/patch-6 (PR #7228)Fabien Potencier2013-03-011-1/+1
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 2.2 branch. Commits ------- c6c71bf Fixed trailing whitespace Discussion ---------- Fixed trailing whitespace
| | * | | | Fixed trailing whitespacePascal Borreli2013-03-011-1/+1
| | | | | |
* | | | | | Merge branch '2.2'Fabien Potencier2013-03-012-1/+72
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: fixed CS Add persian translation to Components/Security bumped Symfony version to 2.2.1-DEV-DEV updated VERSION for 2.2.0 updated CHANGELOG for 2.2.0
| * | | | | fixed CSFabien Potencier2013-03-011-1/+1
| |/ / / /
| * | | | Add persian translation to Components/Securityfzerorubigd2013-03-011-0/+71
| | | | |
* | | | | Merge branch '2.2'Fabien Potencier2013-02-231-1/+1
|\ \ \ \ \ | |/ / / / | | | | / | |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Defined stable version point of Doctrine. [HttpFoundation] Remove Cache-Control when using https download via IE<9 (fixes #6750) Update composer.json [Form] Fixed TimeType not to render a "size" attribute in select tags [Form] Added test for "label" option to accept the value "0" Expanded fault-tolerance for unusual cookie dates Fix docblock type [Form] Fixed "label" option to accept the value "0" Added greek translation merged branch jfcixmedia/2.1 (PR #5838) added a note about a BC break for the path info of sub-request (closes #7138) [DomCrawler] lowered parsed protocol string (fixes #6986) [FrameworkBundle] Fix a BC for Hinclude global template [HttpKernel] fixed locale management when exiting sub-requests fixed HInclude renderer (closes #7113) Removed some leaking deprecation warning in the Form component [HttpKernel] hinclude fragment renderer must escape URIs properly to return valid html Conflicts: src/Symfony/Bundle/FrameworkBundle/composer.json src/Symfony/Component/Security/composer.json
| * | | Merge branch '2.1' into 2.2v2.2.0Fabien Potencier2013-02-231-1/+1
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: Defined stable version point of Doctrine. [HttpFoundation] Remove Cache-Control when using https download via IE<9 (fixes #6750) Update composer.json [Form] Fixed TimeType not to render a "size" attribute in select tags [Form] Added test for "label" option to accept the value "0" Expanded fault-tolerance for unusual cookie dates Fix docblock type [Form] Fixed "label" option to accept the value "0" merged branch jfcixmedia/2.1 (PR #5838) [DomCrawler] lowered parsed protocol string (fixes #6986) Conflicts: composer.json src/Symfony/Bridge/Twig/Resources/views/Form/form_div_layout.html.twig src/Symfony/Bundle/FrameworkBundle/Resources/views/Form/time_widget.html.php src/Symfony/Bundle/FrameworkBundle/composer.json src/Symfony/Component/Form/Tests/Extension/Csrf/EventListener/CsrfValidationListenerTest.php src/Symfony/Component/Routing/composer.json src/Symfony/Component/Security/composer.json src/Symfony/Component/Validator/composer.json
| | * | Defined stable version point of Doctrine.v2.1.8Guilherme Blanco2013-02-221-2/+2
| | | |
* | | | Merge branch '2.2'Fabien Potencier2013-02-112-2/+23
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Fixed XmlFileLoaderTest::testLoadThrowsExceptionWithInvalidFileEvenWithoutSchemaValidation moved file hash calculation to own method [Validator] Add check for existing metadata on property added support for the X-Forwarded-For header (closes #6982, closes #7000) fixed the IP address in HttpCache when calling the backend [EventDispatcher] Added assertion. [EventDispathcer] Fix removeListener [DependencyInjection] Add clone for resources which were introduced in 2.1 [DependencyInjection] Allow frozen containers to be dumped to graphviz Fix 'undefined index' error, when entering scope recursively [Security] fixed session creation on login (closes #7011) replaced usage of the deprecated pattern routing key (replaced with path) Add dot character `.` to legal mime subtype regular expression [HttpFoundation] fixed the creation of sub-requests under some circumstancies (closes #6923, closes #6936)
| * | | Merge branch '2.1' into 2.2Fabien Potencier2013-02-112-2/+23
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: added support for the X-Forwarded-For header (closes #6982, closes #7000) fixed the IP address in HttpCache when calling the backend [EventDispatcher] Added assertion. [EventDispathcer] Fix removeListener [DependencyInjection] Add clone for resources which were introduced in 2.1 [DependencyInjection] Allow frozen containers to be dumped to graphviz Fix 'undefined index' error, when entering scope recursively [Security] fixed session creation on login (closes #7011) Add dot character `.` to legal mime subtype regular expression [HttpFoundation] fixed the creation of sub-requests under some circumstancies (closes #6923, closes #6936)
| | * | [Security] fixed session creation on login (closes #7011)Adrien Samson2013-02-072-2/+23
| | | |
* | | | changed dependencies to allow all 2.3 versions of the components (closes #6983)Fabien Potencier2013-02-111-3/+3
| | | |
* | | | Merge branch '2.2'Fabien Potencier2013-02-112-11/+11
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: (30 commits) [HttpFoundation] Added support for partial ranges in the BinaryFileResponse. [HttpFoundation] Fixed byte ranges in the BinaryFileResponse. updated required versions when depending on the HttpFoundation component updated required versions when depending on the HttpKernel component updated required versions when depending on the Config component updated required versions when depending on the Form component updated required versions when depending on the DependencyInjection component updated required versions when depending on the Validator component updated required versions when depending on the Translation component updated required versions when depending on the Routing component updated required versions when depending on the EventDispatcher component updated required versions when depending on the OptionsResolver component updated required versions when depending on the PropertyAccess component updated required versions when depending on the Security component updated required versions when depending on the Templating component updated required versions when depending on the Stopwatch component updated required versions when depending on the Process component updated required versions when depending on the Finder component updated required versions when depending on the Dom Crawler component use ~2.0 when depending on the Dom Crawler component ...
| * | | updated required versions when depending on the HttpFoundation componentFabien Potencier2013-02-081-1/+1
| | | |