summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | Merge branch '2.1'Fabien Potencier2012-12-061-0/+181
|\ \ \ \ \ | | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: [Locale] fixed tests [Config] Fixed tests on Windows [TwigBundle] Fixed tests [Security] Move DigestDataTest.php inside the Security component Fixed DefaultValue for session.auto_start in NodeDefinition Fix namespace of Validator and BrowserKit Tests Conflicts: src/Symfony/Bundle/TwigBundle/Tests/DependencyInjection/TwigExtensionTest.php src/Symfony/Bundle/TwigBundle/Tests/TwigEngineTest.php
| * | | | [Security] Move DigestDataTest.php inside the Security componentFran Moreno2012-12-041-0/+181
| | | | |
* | | | | Bugfix for creating cookie on loginSuccess in AbstractRememberMeServicesTerje Bråten2012-11-292-1/+6
| | | | |
* | | | | Merge branch '2.1'Fabien Potencier2012-11-291-6/+7
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: (29 commits) [DependencyInjection] fixed composer.json [Validator] Fix typos in validators.ru.xlf Edited some minor grammar and style errors in russian validation file Updated Bulgarian translation [Form] improve error message with a "hasser" hint for PropertyAccessDeniedException [Form] Updated checks for the ICU version from 4.5+ to 4.7+ due to test failures with ICU 4.6 [Form] simplified a test from previous merge Update src/Symfony/Component/Form/Extension/Core/Type/FileType.php fixed CS Xliff with other node than source or target are ignored small fix of #5984 when the container param is not set Filesystem Component mirror symlinked directory fix [Process][Tests] fixed chainedCommandsOutput tests fixed CS Use better default ports in urlRedirectAction Add tests for urlRedirectAction info about session namespace fix upgrade info about locale Update src/Symfony/Component/DomCrawler/Tests/FormTest.php Update src/Symfony/Component/DomCrawler/Form.php ...
| * | | | Merge branch '2.0' into 2.1v2.1.4Fabien Potencier2012-11-291-6/+7
| |\ \ \ \ | | | |/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.0: [DependencyInjection] fixed composer.json [Form] Updated checks for the ICU version from 4.5+ to 4.7+ due to test failures with ICU 4.6 fixed CS small fix of #5984 when the container param is not set fixed CS Use better default ports in urlRedirectAction Add tests for urlRedirectAction Update src/Symfony/Component/DomCrawler/Tests/FormTest.php Update src/Symfony/Component/DomCrawler/Form.php [Security] remove escape charters from username provided by Digest DigestAuthenticationListener [Security] added test extra for digest authentication fixed CS [Security] Fixed digest authentication [Security] Fixed digest authentication [SecurityBundle] Convert Http method to uppercase in the config Use Norm Data instead of Data Conflicts: src/Symfony/Bridge/Doctrine/Form/EventListener/MergeCollectionListener.php src/Symfony/Bundle/FrameworkBundle/Controller/RedirectController.php src/Symfony/Component/DependencyInjection/composer.json
| | * | | [Security] remove escape charters from username provided by Digest ↵v2.0.19Sebastiaan Stok2012-11-151-1/+1
| | | | | | | | | | | | | | | | | | | | DigestAuthenticationListener
| | * | | [Security] Fixed digest authenticationVincent Simonin2012-11-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Digest authentication fail if digest parameters contains `=` character or `, ` string. * Support escaped characters
| | * | | [Security] Fixed digest authenticationVincent Simonin2012-11-151-5/+6
| | | | | | | | | | | | | | | | | | | | Digest authentication fail if digest parameters contains `=` character or `, ` string.
* | | | | Try to make sure cookies get deleted from the TokenProvider when no longer ↵Terje Bråten2012-11-214-13/+17
| | | | | | | | | | | | | | | | | | | | in use
* | | | | merged branch raziel057/COMPONENT_Form (PR #5888)Fabien Potencier2012-11-199-29/+48
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was squashed before being merged into the master branch (closes #5888). Commits ------- 2379d86 CS Fixes - Replaced "array of type" by "Type[]" in PHPDoc block Discussion ---------- CS Fixes - Replaced "array of type" by "Type[]" in PHPDoc block Bug fix: no Feature addition: no Backwards compatibility break: no Symfony2 tests pass: no (but tests doesn't pass on master too). See Travis. License of the code: MIT Documentation PR: Not Applicable Status: Finished To improve support of the eclipse PDT pluggin (for autocompletion), I propose to change the array notation in PHPDoc blocks to match the phpDocumentor notation for "array of type". Modifications are made for the following components: - BrowserKit - ClassLoader - Config - Console - CssSelector - DependencyInjection - DomCrawler - EventDispatcher (no changes) - Filesystem (no changes) - Finder - Form - HttpFoundation - HttpKernel - Locale - OptionResolver (no changes) - Process (no changes) - Routing (no changes) - Serializer (no changes) - Templating - Translation - Validator - Yaml (no changes) - Security - Stopwatch (no changes) See Proposal https://github.com/symfony/symfony/pull/5852 --------------------------------------------------------------------------- by pborreli at 2012-11-01T15:19:27Z will you make a PR for each component ? why not only one PR with one commit for each component instead ? --------------------------------------------------------------------------- by raziel057 at 2012-11-01T15:32:39Z Ok, I'm going try to do it. --------------------------------------------------------------------------- by raziel057 at 2012-11-01T16:12:56Z I would like to rename my branch from COMPONENT_Form to changes-phpdoc (as all modifications would be commited in only one branch), so I tried to execute the following command but I have an error. git remote rename COMPONENT_Form changes-phpdoc error: Could not rename config section 'remote.COMPONENT_Form' to 'remote.changes-phpdoc' Do you know how to do it? --------------------------------------------------------------------------- by pborreli at 2012-11-01T16:14:26Z don't rename it, you will have to close and make another PR which is useless here, just edit the title. --------------------------------------------------------------------------- by stof at 2012-11-01T16:16:17Z and ``git remote rename`` is about renaming a remote repo, not a branch --------------------------------------------------------------------------- by raziel057 at 2012-11-03T11:36:02Z Is it normal that all my commit are duplicated? I would like just update my master and merge with my branch. --------------------------------------------------------------------------- by fabpot at 2012-11-06T10:22:55Z @raziel057 Can you rebase on master? That should fix your problem. --------------------------------------------------------------------------- by fabpot at 2012-11-09T13:28:53Z @raziel057 Can you finish this PR? --------------------------------------------------------------------------- by Tobion at 2012-11-09T13:34:45Z I'll do it for the routing component this evening because I know it by heart. ^^ --------------------------------------------------------------------------- by raziel057 at 2012-11-09T15:06:26Z @Tobion ok Thanks! @fabpot Yes, I will try to finish it this week end. --------------------------------------------------------------------------- by raziel057 at 2012-11-11T13:04:07Z @Tobion Did you already change PHPDoc in the Routing component? --------------------------------------------------------------------------- by Tobion at 2012-11-11T15:21:18Z @raziel057 Yes I'm working on it. --------------------------------------------------------------------------- by Tobion at 2012-11-12T15:16:31Z @raziel057 Done. See #5994
| * | | | | CS Fixes - Replaced "array of type" by "Type[]" in PHPDoc blockThomas Lallement2012-11-199-29/+48
| | | | | |
* | | | | | Merge branch '2.1'Fabien Potencier2012-11-131-4/+2
|\ \ \ \ \ \ | | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: fixed comment. The parent ACL is not accessed in this method. [HttpFoundation] Make host & methods really case insensitive in the RequestMacther [Validator] fixed Ukrainian language code (closes #5972) Fixed case of php function
| * | | | | Merge branch '2.0' into 2.1Fabien Potencier2012-11-131-4/+2
| |\ \ \ \ \ | | | |/ / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.0: fixed comment. The parent ACL is not accessed in this method. [HttpFoundation] Make host & methods really case insensitive in the RequestMacther [Validator] fixed Ukrainian language code (closes #5972) Fixed case of php function Conflicts: src/Symfony/Bundle/FrameworkBundle/Resources/translations/validators.uk.xliff src/Symfony/Component/HttpFoundation/RequestMatcher.php
| | * | | | fixed comment. The parent ACL is not accessed in this method.Jörn Lang2012-11-121-4/+2
| | | | | |
* | | | | | Merge branch '2.1'Fabien Potencier2012-11-131-1/+1
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: (24 commits) forced Travis to use source to workaround their not-up-to-date Composer on PHP 5.3.3 [Routing] removed irrelevant string cast in Route Fixed typo Make YamlFileLoader and XmlFileLoader file loading extensible [HttpKernel] fix typo Fixed singularization of "prices" [Form] Removed an exception that prevented valid formats from being passed, e.g. "h" for the hour, "L" for the month etc. [HttpKernel] fixed Client when using StreamedResponses (closes #5370) fixed PDO session handler for Oracle (closes #5829) [HttpFoundation] fixed PDO session handler for Oracle (closes #5829) [Locale] removed a check that is done too early (and it is done twice anyways) Update src/Symfony/Component/Validator/Resources/translations/validators.fa.xlf Adding new localized strings for farsi validation. [HttpFoundation] moved the HTTP protocol check from StreamedResponse to Response (closes #5937) [Form] Fixed forms not to be marked invalid if their children are already marked invalid [Form] Excluded some tests in NumberToLocalizedStringTransformerTest which fail on ICU 4.4, but work on ICU 4.8 added missing tests from previous merge [Form] Fixed NumberToLocalizedStringTransformer to accept both comma and dot as decimal separator, if possible Fix export-ignore on Windows Show correct class name InputArgument in error message ... Conflicts: .travis.yml src/Symfony/Component/Form/Extension/Core/DataTransformer/NumberToLocalizedStringTransformer.php
| * | | | | Fix export-ignore on WindowsWłodzimierz Gajda2012-11-081-1/+1
| | | | | |
* | | | | | merged branch Inori/consistent-util-classes (PR #5879)Fabien Potencier2012-11-132-4/+10
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was squashed before being merged into the master branch (closes #5879). Commits ------- 07bd5c6 Make non-instantiable utils classes consistent with each other Discussion ---------- Make non-instantiable utils classes consistent with each other Bug fix: no Feature addition: no Backwards compatibility break: no Symfony2 tests pass: yes License of the code: MIT As per discussion in #5875 turned out that we don't have a consistent way to define non-instantiatable classes. I don't like `final` as it removes flexibility with no visible gain. I don't like `abstract` since it's not specifically clear what is meant by that. Is this class not complete? Should it be extended?
| * | | | | Make non-instantiable utils classes consistent with each otherRoman Marintsenko2012-11-132-4/+10
| | |_|/ / | |/| | |
* | | | | made usage of Composer autoloader for subtree-split unit testsFabien Potencier2012-11-094-29/+6
| | | | |
* | | | | [Security] updated CHANGELOGFabien Potencier2012-11-081-0/+3
| | | | |
* | | | | merged branch fabpot/subscribers (PR #5919)Fabien Potencier2012-11-062-2/+16
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Commits ------- af87c2b changed the Firewall to be a proper subscriber 02bd359 changed the remember-me listener to be a proper subscriber Discussion ---------- Changed some security classes to implement the EventSubscriberInterface interface --------------------------------------------------------------------------- by fabpot at 2012-11-06T10:11:28Z That could also be done in 2.1. What do you think?
| * | | | | changed the Firewall to be a proper subscriberFabien Potencier2012-11-061-1/+8
| | | | | |
| * | | | | changed the remember-me listener to be a proper subscriberFabien Potencier2012-11-061-1/+8
| | | | | |
* | | | | | fixed typoFabien Potencier2012-11-061-1/+1
|/ / / / /
* | | | | merged branch fabpot/401-status-code (PR #5882)Fabien Potencier2012-11-064-7/+2
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Commits ------- e193590 [Security] removed the 401 error custom status message Discussion ---------- [Security] removed the 401 error custom status message see fabpot/Silex#496 --------------------------------------------------------------------------- by pborreli at 2012-10-31T17:29:24Z @fabpot please fix the test suite, if you don't know how to do it, read http://symfony.com/doc/current/contributing/code/tests.html, thx :smile_cat:
| * | | | | [Security] removed the 401 error custom status messageFabien Potencier2012-11-064-7/+2
| |/ / / /
* | | | | removed unused use statementsFabien Potencier2012-11-042-2/+0
|/ / / /
* | | | merged branch acasademont/tweak_userform_security_listener (PR #5824)Fabien Potencier2012-10-281-11/+8
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the master branch. Commits ------- 3e58893 [Security] Tweak UsernamePasswordFormAuthenticationListener Discussion ---------- [Security] Tweak UsernamePasswordFormAuthenticationListener Bug fix: no Feature addition: no Backwards compatibility break: no Symfony2 tests pass: [![Build Status](https://secure.travis-ci.org/acasademont/symfony.png)](http://travis-ci.org/acasademont/symfony) Fixes the following tickets: - Todo: - License of the code: MIT Documentation PR: - Improvements: - Do not check twice for the ```only_post``` condition. The condition in the ```attemptAuthentication``` method is useless as this method will never be called if the previous ```requiresAuthentication``` call returns false. - If the expected request is ```only_post```, check only the POST variables for the username and password parameters. Otherwise, query params and attributes are checked before. - Use POST instead of post for correctness
| * | | | [Security] Tweak UsernamePasswordFormAuthenticationListenerAlbert Casademont2012-10-231-11/+8
| | | | | | | | | | | | | | | | | | | | | | | | | - Do not check twice for the only_post condition - If the expected request is only_post, check only the post variables for the username and password parameters
* | | | | [Security] fixed tests when OpenSSL is not installedFabien Potencier2012-10-282-5/+2
| | | | |
* | | | | fixed tests when OpenSsl is not enabled in PHP, renamed a missnamed test, ↵Fabien Potencier2012-10-283-3/+48
| | | | | | | | | | | | | | | | | | | | added missing license doc blocks
* | | | | fixed CSFabien Potencier2012-10-284-18/+18
| | | | |
* | | | | added a SecureRandomInterfaceFabien Potencier2012-10-283-7/+35
| | | | |
* | | | | rename String to StringUtilsFabien Potencier2012-10-283-6/+6
| | | | |
* | | | | moved the secure random dep for remember me as a constructor argumentFabien Potencier2012-10-282-5/+14
| | | | |
* | | | | renamed Prng to SecureRandomFabien Potencier2012-10-285-43/+42
| | | | |
* | | | | simplified the Prng codeFabien Potencier2012-10-283-54/+30
| | | | |
* | | | | moved the secure random class from JMSSecurityExtraBundle to Symfony (closes ↵Fabien Potencier2012-10-289-36/+401
| | | | | | | | | | | | | | | | | | | | #3595)
* | | | | Merge branch '2.1'Fabien Potencier2012-10-248-16/+12
|\ \ \ \ \ | |/ / / / |/| / / / | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: added missing use statment (closes #5825) Code cleanup [WebProfilerBundle] Fixed the use of nested macros Removed unused use statements. Nsdocblocks [ConfigDumpReference] avoid notice for variable nodes fixed fallback locale UniqueValidatorTest, Change message on assertions Documented removed _form_is_choice_group function Conflicts: src/Symfony/Bundle/FrameworkBundle/Command/ConfigDumpReferenceCommand.php src/Symfony/Bundle/WebProfilerBundle/Profiler/TemplateManager.php
| * | | Code cleanupv2.1.3Mario A. Alvarez Garcia2012-10-224-4/+0
| | | |
| * | | NsdocblocksDrak2012-10-204-12/+12
| | | |
* | | | Merge branch '2.1'Fabien Potencier2012-10-181-1/+1
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: (28 commits) Delete use of CreationExeption [Form] Fixed error message in PropertyPath to not advice to use a non-existing feature [Form] Fixed creation of multiple money fields with different currencies [Form] Fixed setting the "data" option to an object in "choice" and "entity" type Fixed Serbian plural translations. Fixed IPv6 Check in RequestMatcher Fix typo change what I think is a typo [Console] Fix error when mode is not in PATH [WebProfilerBundle] fixed macro usage (to be forward compatible with Twig 2.x) Change monolog require-dev to use the branch alias instead of dev-master [FrameworkBundle] partially reverted previous merge [2.1] Added missing error return codes in commands Made the router lazy when setting the context [WebProfilerBundle] fixed typos Fix incorrect variable in FileProfilerStorage UnitTest fix UnitTest fix added a unit test fixed #5384 ...
| * | | change what I think is a typoGrégoire Paris2012-10-161-1/+1
| | | |
* | | | [Security] Added Pbkdf2PasswordEncoderSebastiaan Stok2012-10-083-0/+147
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [Security] changed default iterations of Pbkdf2PasswordEncoder to 1000 instead of 5000 [Security] Improved description of PBKDF2 encoder [SecurityBundle] added PBKDF2 PasswordEncoder updated CHANGELOG.md [Security] Use the build-in hash_pbkdf2() when available [SecurityBundle] added information about hash_algorithm for configuration [Security] always check algorithm and fixed CS
* | | | Merge branch '2.1'Fabien Potencier2012-10-061-0/+2
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: fixed CS added doc comments added doc comments [Validator] Updated swedish translation Update src/Symfony/Component/Validator/Resources/translations/validators.de.xlf [2.1] Exclude tests from zips via gitattributes [HttpKernel][Translator] Fixed type-hints Updated lithuanian validation translation [DomCrawler] Allows using multiselect through Form::setValues(). [Translation] forced the catalogue to be regenerated when a resource is added (closes symfony/Translation#1) Unit test for patched method OptionsResolver::validateOptionValues(). validateOptionValues throw a notice if an allowed value is set and the corresponding option isn't. [Form] Hardened code of ViolationMapper against errors [HttpFoundation] Fixed #5611 - Request::splitHttpAcceptHeader incorrect result order. [Form] Fixed negative index access in PropertyPathBuilder Update src/Symfony/Component/Validator/Resources/translations/validators.ro.xlf Conflicts: src/Symfony/Component/DomCrawler/Form.php src/Symfony/Component/Process/Process.php
| * | | [2.1] Exclude tests from zips via gitattributesIgor Wiedler2012-10-041-0/+2
| | | |
* | | | Merge branch '2.1'Fabien Potencier2012-10-021-1/+1
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.1: [2.1] Fix SessionHandlerInterface autoloading Remove executable bit from HttpKernel/DependencyInjection/ConfigurableExtension.php [2.0][http-foundation] Fix Response::getDate method [DoctrineBridge] Require class option for DoctrineType [HttpFoundation] fixed the path to the SensioHandlerInterface class in composer.json Support the new Microsoft URL Rewrite Module for IIS 7.0. @see http://framework.zend.com/issues/browse/ZF-4491 @see http://framework.zend.com/code/revision.php?repname=Zend+Framework&rev=24842 fixed undefined variable hasColorSupport does not take an argument Improve FilterResponseEvent docblocks Response ref
| * | | Merge branch '2.0' into 2.1Fabien Potencier2012-10-021-1/+1
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.0: [2.0][http-foundation] Fix Response::getDate method Support the new Microsoft URL Rewrite Module for IIS 7.0. @see http://framework.zend.com/issues/browse/ZF-4491 @see http://framework.zend.com/code/revision.php?repname=Zend+Framework&rev=24842 fixed undefined variable hasColorSupport does not take an argument Improve FilterResponseEvent docblocks Response ref Conflicts: tests/Symfony/Tests/Component/HttpFoundation/ResponseTest.php
| | * | fixed undefined variablev2.0.18James Michael DuPont2012-09-281-1/+1
| | | |
| | * | avoid fatal error on invalid sessionv2.0.17Kris Wallsmith2012-08-071-8/+15
| | | |
* | | | Optimize autoload prefix in composer.jsonFilippo Tessarotto2012-09-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | By having more specific autoload prefixes it is possible to reduce the number of stat calls made. Also it prevents conflicts with similar namespaces.
* | | | Update ↵nervo2012-09-231-1/+1
| | | | | | | | | | | | | | | | | | | | src/Symfony/Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php Better consistency in request method checking (See L.58)
* | | | replaced self.version/2.1.* by 2.2.* in composer.json filesFabien Potencier2012-09-101-5/+5
| | | |
* | | | merged 2.1Fabien Potencier2012-09-101-5/+5
|\ \ \ \ | |/ / /
| * | | replaced self.version by 2.1.* in composer.json filesv2.1.2v2.1.1Fabien Potencier2012-09-101-5/+5
| | | |
* | | | udpated composer.json to 2.2Fabien Potencier2012-09-061-7/+7
|/ / /
* | | merged branch beberlei/RevertDbalAcl (PR #5253)v2.1.0Fabien Potencier2012-09-041-12/+12
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 1b5ad17 Revert "Removed MySQL-exclusive usage of unsigned integer from table creation" Discussion ---------- [Security][DBAL] Revert MySQL unsigned removal Revert "Removed MySQL-exclusive usage of unsigned integer from table creation" This reverts commit 57694aaa94ec0118f516e8962be2f018c36d2011. The problem is underlying in Doctrine DBAL change tracking and should either be fixed or ignored there. I opened a ticket on Doctrine Jira http://doctrine-project.org/jira/browse/DBAL-322 --------------------------------------------------------------------------- by fabpot at 2012-08-14T06:40:47Z I will merge this PR after we have a release of DBAL that includes the fix for DBAL-322. --------------------------------------------------------------------------- by acasademont at 2012-08-20T08:01:48Z This was already fixed 2 weeks ago in doctrine/dbal#183 so i guess this can be closed --------------------------------------------------------------------------- by acasademont at 2012-08-20T08:02:06Z merged i mean
| * | | Revert "Removed MySQL-exclusive usage of unsigned integer from table creation"Benjamin Eberlei2012-08-141-12/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 57694aaa94ec0118f516e8962be2f018c36d2011. The problem is underlying in Doctrine DBAL change tracking and should either be fixed or ignored there.
* | | | [Security] fixed typo in a testFabien Potencier2012-08-311-1/+1
| | | |
* | | | Move remember me ResponseListener from security bundle into security componentDerManoMann2012-08-301-0/+33
| | | | | | | | | | | | | | | | This move allows to implement the remember me feature in Silex without having to reference the security bundle.
* | | | Add minimum-stability (dev) in each componentWilliam DURAND2012-08-221-0/+1
|/ / /
* | | Removed MySQL-exclusive usage of unsigned integer from table creationdaFish2012-08-131-12/+12
| | |
* | | merged 2.0Fabien Potencier2012-08-102-8/+58
| | |
* | | Fixed typosPascal Borreli2012-07-285-6/+6
| | |
* | | [Security] tweaked previous mergeFabien Potencier2012-07-261-10/+4
| | |
* | | [Security] add docblocks to InteractiveLoginEventJonathan Ingram2012-07-261-0/+22
| | | | | | | | | Close #5053 (was easier to just create a new PR).
* | | [Security] Fixed use_referer option not working properly when login_path is ↵Albert Casademont2012-07-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a route name When use_referer is set to true and the request comes from the login page, the user should not be redirected to the login form again (the referer) but to the default_target_path. The problem arises when our login_path option is not a path but a route name, as the ```getUriForPath()``` method is not made to create routes from route names.
* | | merged 2.0Fabien Potencier2012-07-231-0/+1
|\ \ \ | |/ /
| * | Added missing propertyGrégoire Pineau2012-07-231-0/+1
| | |
| * | fixed CS (mainly method signatures)v2.0.16Fabien Potencier2012-07-0953-144/+142
| | |
* | | merged branch KaipiYann/Fix-DocBlock-attemptAuthentication (PR #4996)Fabien Potencier2012-07-211-1/+1
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 134cc84 [Security] Fix DocBlock of attemptAuthentication Discussion ---------- [Security] Fix DocBlock of attemptAuthentication Bug fix: no Feature addition: no Backwards compatibility break: no Symfony2 tests pass: yes Fixes the following tickets: Todo: - License of the code: MIT Documentation PR: -
| * | | [Security] Fix DocBlock of attemptAuthenticationKaipi Yann2012-07-201-1/+1
| | | | | | | | | | | | | | | | Add Response as possible return type of the method because the method AbstractAuthenticationListener::handle() test if $returnValue is an instance of Response (line 148).
* | | | Revert "merged branch stof/serializable_role (PR #4925)"Fabien Potencier2012-07-153-36/+1
| | | | | | | | | | | | | | | | | | | | This reverts commit b0750f6dcd1e6f8b1be2c1e6604d4cbb785c9a8e, reversing changes made to d09bfe7552148d1d36b65487dfcbd378830b55a0.
* | | | merged branch stof/serializable_role (PR #4925)Fabien Potencier2012-07-153-1/+36
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 1f2f866 fixed the serialization of the SwitchUserRole b55930a [Security] Implemented the Serializable interface in the Role class Discussion ---------- [Security] Implemented the Serializable interface in the Role class The Role class is serialized in the session for each role of the user. Implementing the Serializable interface allows to reduce the size of the data.
| * | | | fixed the serialization of the SwitchUserRoleChristophe Coevoet2012-07-141-0/+18
| | | | |
| * | | | [Security] Implemented the Serializable interface in the Role classChristophe Coevoet2012-07-142-1/+18
| | | | |
* | | | | Revert "raised the minimum version of PHP to 5.3.4 (closes #3856)"Fabien Potencier2012-07-151-1/+1
| | | | | | | | | | | | | | | | | | | | This reverts commit 2dcc44897ef1ceec2721bbf616c4744131340657.
* | | | | [Security] Add note to changelog about BC breakAlexander2012-07-141-0/+2
| | | | |
* | | | | [Security] Extract default logout success handling logicAlexander2012-07-143-16/+59
|/ / / /
* | | | raised the minimum version of PHP to 5.3.4 (closes #3856)Fabien Potencier2012-07-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We've raised the minimum version of PHP because of a PHP bug before 5.3.4: https://bugs.php.net/bug.php?id=52083 https://bugs.php.net/bug.php?id=50027
* | | | ensured that an exception is always converted to an error response (and that ↵Fabien Potencier2012-07-131-1/+0
| | | | | | | | | | | | | | | | we keep the HTTP status code and headers)
* | | | [Security] made sure that we always replace the security access denied ↵Fabien Potencier2012-07-131-4/+2
| | | | | | | | | | | | | | | | exception to an HTTP one
* | | | merged branch asm89/fix-default-auth-successhandler-extension (PR #4865)Fabien Potencier2012-07-121-6/+24
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 5e6c06f [Security] Remove hard dependency on $providerKey for default auth success handler Discussion ---------- [Security] Remove hard dependency on $providerKey for default auth success handler Bug fix: yes? Feature addition: yes? Backwards compatibility break: no Symfony2 tests pass: [![Build Status](https://secure.travis-ci.org/asm89/symfony.png?branch=fix-default-auth-successhandler-extension)](http://travis-ci.org/asm89/symfony) License of the code: MIT In 8ffaafa86741a03ecb2f91e3d67802f4c6baf36b a hard dependency was introduced between the default authentication success handling code and the active firewall. This makes sense. However, for people implementing their own success handler this makes it impossible to extend the default class as the `$providerKey` is set in the extension of the security bundle. This PR makes the dependency a soft one so people can extend the class and use the default definition as a parent for their own service. However it is the responsibility of the developers to set the appropriate `$providerKey` if they want to use the target url saved in the session. Imo this is the right way as the developer should also set the appropriate options for the parent class in the overriding constructor. --------------------------------------------------------------------------- by stof at 2012-07-11T19:01:12Z @asm89 this PR need to be rebased according to github --------------------------------------------------------------------------- by asm89 at 2012-07-11T19:13:09Z @stof Done :) --------------------------------------------------------------------------- by asm89 at 2012-07-12T10:07:53Z @fabpot Done.
| * | | | [Security] Remove hard dependency on $providerKey for default auth success ↵Alexander2012-07-121-6/+24
| | | | | | | | | | | | | | | | | | | | handler
* | | | | added missing dotChristian Raue2012-07-121-1/+1
|/ / / /
* | | | merged branch asm89/refactor-authentication-success-handling (PR #4599)Fabien Potencier2012-07-097-79/+201
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- bb138da [Security] Fix regression after rebase. Target url should be firewall dependent eb19f2c [Security] Add note to CHANGELOG about refactored authentication failure/success handling [Security] Various CS + doc fixes [Security] Exception when authentication failure/success handlers do not return a response [Security] Add authors + fix docblock f9d5606 [Security] Update AuthenticationFailureHandlerInterface docblock. Never return null 915704c [Security] Move default authentication failure handling strategy to seperate class [Security] Update configuration for changes regarding default failure handler [Security] Fixes + add AbstractFactory test for failure handler c6aa392 [Security] Move default authentication success handling strategy to seperate class [Security] Update configuration for changes regarding default success handler [Security] Fix + add AbstractFactory test Discussion ---------- [Security] Refactor authentication success handling Bug fix: no Feature addition: no Backwards compatibility break: yes Symfony2 tests pass: [![Build Status](https://secure.travis-ci.org/asm89/symfony.png?branch=refactor-authentication-success-handling)](http://travis-ci.org/asm89/symfony) License of the code: MIT This PR extracts the default authentication success handling to its own class as discussed in #4553. In the end the PR will basically revert #3183 (as suggested by @schmittjoh) and fix point one of #838. There are a few noticeable changes in this PR: - This implementation changes the constructor signature of the `AbstractAuthentictionListener` and `UsernamePasswordFormAuthenticationListener` by making the `AuthenticationSuccessHandler` mandatory (BC break). If this WIP is approved I will refactor the failure handling logic too and then this will also move one place in the constructor - This PR reverts the change of making the returning of a `Response` optional in the `AuthenticationSuccessHandlerInterface`. Developers can now extend the default behavior themselves @schmittjoh Any suggestions? Or a +1 to do the failure logic too? --------------------------------------------------------------------------- by schmittjoh at 2012-06-17T23:53:07Z +1 from me @fabpot, what so you think? --------------------------------------------------------------------------- by fabpot at 2012-06-19T08:15:48Z Can you add a note in the CHANGELOG? Thanks. --------------------------------------------------------------------------- by asm89 at 2012-06-19T10:22:20Z I will, but I'll first do the same for the failure logic. --------------------------------------------------------------------------- by travisbot at 2012-06-21T08:03:14Z This pull request [passes](http://travis-ci.org/symfony/symfony/builds/1671555) (merged 17c8f66f into 55c6df99). --------------------------------------------------------------------------- by asm89 at 2012-06-21T08:45:38Z :+1: thank you @stof. I think this is good to go now. --------------------------------------------------------------------------- by travisbot at 2012-06-21T08:50:28Z This pull request [passes](http://travis-ci.org/symfony/symfony/builds/1671817) (merged 8982c769 into 55c6df99). --------------------------------------------------------------------------- by asm89 at 2012-06-21T14:23:58Z @schmittjoh @fabpot The `LogoutListener` currently throws an exception when the successhandler doesn't return a `Response` ([link](https://github.com/symfony/symfony/blob/9e9519913d2c5e2bef96070bcb9106e1e389c3bd/src/Symfony/Component/Security/Http/Firewall/LogoutListener.php#L101)). Should this code check for this too? --------------------------------------------------------------------------- by schmittjoh at 2012-06-21T14:26:49Z Yes, this code was removed, but needs to be re-added here as well. --------------------------------------------------------------------------- by travisbot at 2012-06-21T15:08:59Z This pull request [passes](http://travis-ci.org/symfony/symfony/builds/1674437) (merged 5afa240d into 55c6df99). --------------------------------------------------------------------------- by asm89 at 2012-06-26T06:01:02Z @fabpot Can you make a final decision on this? If you decide on point 3, this code can be merged. I agree with the arguments of @stof about the option handling and it 'only' being a BC break for direct users of the security component. I even think these direct users should be really careful anyway, since the behavior of the success and failurehandlers now change back to how they acted in 2.0. Now I am thinking about it, can't the optional parameters of this class move to setters anyway? That will make it cleaner to extend. --------------------------------------------------------------------------- by asm89 at 2012-06-28T10:29:50Z ping @fabpot --------------------------------------------------------------------------- by fabpot at 2012-06-28T17:23:02Z I'm ok with option 1 (the BC break). After doing the last changes, can you squash your commits before I merge? Thanks. --------------------------------------------------------------------------- by asm89 at 2012-07-06T21:59:54Z @fabpot I rebased the PR, added the authors and also ported the fix that was done in 8ffaafa86741a03ecb2f91e3d67802f4c6baf36b to be contained in the default success handler. I also squashed all the CS and 'small blabla fix' commits. Is it ok now? Edit: travisbot will probably say that the tests in this PR fail, but that is because current master fails on form things --------------------------------------------------------------------------- by asm89 at 2012-07-08T18:53:05Z I rebased the PR, tests are green now: [![Build Status](https://secure.travis-ci.org/asm89/symfony.png?branch=refactor-authentication-success-handling)](http://travis-ci.org/asm89/symfony).
| * | | | [Security] Fix regression after rebase. Target url should be firewall dependentAlexander2012-07-082-5/+8
| | | | |
| * | | | [Security] Add note to CHANGELOG about refactored authentication ↵Alexander2012-07-084-36/+31
| | | | | | | | | | | | | | | | | | | | failure/success handling [Security] Various CS + doc fixes [Security] Exception when authentication failure/success handlers do not return a response [Security] Add authors + fix docblock
| * | | | [Security] Update AuthenticationFailureHandlerInterface docblock. Never ↵Alexander2012-07-081-1/+1
| | | | | | | | | | | | | | | | | | | | return null
| * | | | [Security] Move default authentication failure handling strategy to seperate ↵Alexander2012-07-084-35/+116
| | | | | | | | | | | | | | | | | | | | class [Security] Update configuration for changes regarding default failure handler [Security] Fixes + add AbstractFactory test for failure handler
| * | | | [Security] Move default authentication success handling strategy to seperate ↵Alexander2012-07-084-47/+90
| | |_|/ | |/| | | | | | | | | | class [Security] Update configuration for changes regarding default success handler [Security] Fix + add AbstractFactory test
* | | | fixed CSFabien Potencier2012-07-0958-150/+143
|/ / /
* | | [Security] Fix typo in docblockAdrien Brault2012-07-071-1/+1
|/ /
* | [Security] fixed automatic registration of the response listener when ↵Fabien Potencier2012-07-061-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | creating the listener This is not a problem with Symfony, but when using the component standalone (Silex for instance), the context listener might be instantiated even if the firewall does not need to be fired. In that case, the handle() method is not called, but the response listener is called, which means that en empty token is stored in the session. For Silex, it means that when authenticated, if you visit a 404 page, you would be disconnected automatically.
* | [Security] updated CHANGELOGFabien Potencier2012-07-021-0/+1
| |
* | merged branch uwej711/security_target_path_master (PR #4409)Fabien Potencier2012-07-022-4/+6
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 8ffaafa Make the session entry for the target url firewall dependent. Discussion ---------- [Security] Make the session entry for the target url firewall dependent. Bug fix: yes Feature addition: no Backwards compatibility break: yes Symfony2 tests pass: yes Fixes the following tickets: License of the code: MIT If there are two firewalls (eg. main and admin), calling an protected admin url will direct you to the login form of the admin. If I ignore this and go to the login form of the main firewall directly I will end up being redirected to the stored admin target url, which will lead me to the admin login form again. --------------------------------------------------------------------------- by travisbot at 2012-05-25T09:33:44Z This pull request [passes](http://travis-ci.org/symfony/symfony/builds/1431566) (merged 8ffaafa8 into 45849ce3). --------------------------------------------------------------------------- by uwej711 at 2012-06-09T08:05:54Z Doesn't this make sense or did this slip through? Or is there something missing?
| * | Make the session entry for the target url firewall dependent.Uwe Jäger2012-05-252-4/+6
| | | | | | | | | | | | | | | | | | | | | If there are two firewalls (eg. main and admin), calling an protected admin url will direct you to the login form of the admin. If I ignore this and go to the login form of the main firewall directly I will end up being redirected to the stored admin target url. This is not what you usually want to happen.
* | | fixed phpdocFabien Potencier2012-06-261-1/+4
| | |
* | | [Security] simplified some codeFabien Potencier2012-06-261-16/+21
| | |
* | | [Security] changed the HttpUtils constructor to tak both a UrlGenerator and ↵Fabien Potencier2012-06-263-32/+37
| | | | | | | | | | | | a UrlMatcher instead of a Router (to make it useable by Silex)