summaryrefslogtreecommitdiffstats
path: root/Core/Exception
Commit message (Collapse)AuthorAgeFilesLines
* AccessDeniedException: rename object to subjectChristian Flothmann2016-09-191-6/+6
| | | | | With this change the name is inline with what we use in the base voter interface.
* [Security] Expose the required roles in AccessDeniedExceptionTristan Darricau2016-07-291-0/+35
|
* Adding a class to make it easier to set custom authentication error messagesRyan Weaver2015-09-271-0/+79
|
* Adding a new exception and throwing it when the User changesRyan Weaver2015-09-201-0/+31
| | | | | | | | | | | This is quite technical. As you can see in the provider, the method is called sometimes when the User changes, and so the token becomes de-authenticated (e.g. someone else changes the password between requests). In practice, the user should be unauthenticated. Using the anonymous token did this, but throwing an AccountStatusException seems like a better idea. It needs to be an AccountStatusException because the ExceptionListener from the Firewall looks for exceptions of this class and logs the user out when they are found (because this is their purpose).
* unify default AccessDeniedExeption messageChristian Flothmann2015-06-291-1/+1
|
* Make @inheritdoc consistent (lowercase)Philipp Wahala2014-07-051-1/+1
|
* feature #10427 Username in UsernameNotFoundException message data (maryo)Fabien Potencier2014-06-061-0/+8
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was squashed before being merged into the 2.6-dev branch (closes #10427). Discussion ---------- Username in UsernameNotFoundException message data | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | | License | MIT | Doc PR | Added username in UsernameNotFoundException message data Commits ------- 3dfaa19 Username in UsernameNotFoundException message data
| * Username in UsernameNotFoundException message dataMarek Štípek2014-06-061-0/+8
| |
* | Merge branch '2.3' into 2.4Fabien Potencier2014-04-1616-19/+19
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.3: made {@inheritdoc} annotations consistent across the board fixed types in phpdocs made phpdoc types consistent with those defined in Hack Add support Thai translations made types consistent with those defined in Hack removed extra/unsupported arguments [HttpKernel] fixed an error message [TwigBundle] removed undefined argument [Translation] Make IcuDatFileLoader/IcuResFileLoader::load invalid resource compatible with HHVM. Conflicts: src/Symfony/Bridge/ProxyManager/Tests/LazyProxy/Fixtures/php/lazy_service.php src/Symfony/Bundle/FrameworkBundle/Command/ContainerDebugCommand.php src/Symfony/Bundle/FrameworkBundle/Templating/Loader/FilesystemLoader.php src/Symfony/Bundle/WebProfilerBundle/EventListener/WebDebugToolbarListener.php src/Symfony/Component/Config/Definition/ReferenceDumper.php src/Symfony/Component/Console/Helper/DescriptorHelper.php src/Symfony/Component/Debug/ErrorHandler.php src/Symfony/Component/Finder/Tests/Iterator/RecursiveDirectoryIteratorTest.php src/Symfony/Component/Form/Extension/Core/DataTransformer/IntegerToLocalizedStringTransformer.php src/Symfony/Component/Form/Tests/Extension/Core/DataMapper/PropertyPathMapperTest.php src/Symfony/Component/HttpFoundation/Response.php src/Symfony/Component/HttpFoundation/StreamedResponse.php src/Symfony/Component/HttpKernel/Debug/TraceableEventDispatcher.php src/Symfony/Component/HttpKernel/EventListener/ProfilerListener.php src/Symfony/Component/HttpKernel/Fragment/FragmentHandler.php src/Symfony/Component/HttpKernel/Fragment/RoutableFragmentRenderer.php src/Symfony/Component/HttpKernel/Kernel.php src/Symfony/Component/HttpKernel/Tests/Fixtures/KernelForTest.php src/Symfony/Component/Intl/NumberFormatter/NumberFormatter.php src/Symfony/Component/Security/Core/Authorization/AccessDecisionManager.php src/Symfony/Component/Stopwatch/StopwatchPeriod.php src/Symfony/Component/Translation/TranslatorInterface.php src/Symfony/Component/Validator/ConstraintValidatorFactory.php
| * made {@inheritdoc} annotations consistent across the boardFabien Potencier2014-04-1616-19/+19
| |
* | Merge branch '2.3' into 2.4v2.4.1Fabien Potencier2014-01-011-2/+0
|\ \ | |/ | | | | | | | | | | | | | | | | | | | | * 2.3: removed unneeded use statements Prepend Child Bundle paths before the parent [Routing] add unit tests for Symfony\Component\Routing\RequestContext class Conflicts: src/Symfony/Component/Form/Extension/Csrf/CsrfExtension.php src/Symfony/Component/HttpKernel/DataCollector/TimeDataCollector.php src/Symfony/Component/Validator/ConstraintValidatorFactory.php
| * removed unneeded use statementsFabien Potencier2014-01-011-2/+0
| |
* | [Security\Csrf] Split CsrfTokenGenerator into CsrfTokenManager and ↵v2.4.0-BETA1Bernhard Schussek2013-10-073-0/+63
|/ | | | TokenGenerator
* [Security] Switch to English messages as message keysAlexander2013-01-0716-17/+18
|
* [Security] Fix CS + unreachable codeAlexander2013-01-072-8/+4
|
* [Security] Fix `AuthenticationException` serializationAlexander2013-01-073-2/+48
|
* [Security] Introduced `UsernameNotFoundException#get/setUsername`Alexander2013-01-071-0/+22
|
* [Security] Removed `get/setExtraInformation`, added `get/set(Token|User)`Alexander2013-01-072-5/+41
|
* [Security] Add custom `getMessageKey` AccountStatusException childsAlexander2013-01-074-0/+32
|
* [Security] Add `getMessageKey` and `getMessageData` to auth exceptionsAlexander2013-01-0712-2/+106
|
* [Security] Change signature of `AuthenticationException` to match `\Exception`Alexander2013-01-071-7/+1
|
* [Security] fixed English grammar in exception messageDouglas Greenshields2012-05-011-1/+1
|
* fixed CS (missing or misplaced license blocks)Eriksen Costa2012-04-021-2/+2
|
* updated license blocksEriksen Costa2012-03-311-3/+3
|
* [Security] Use LogoutException for invalid CSRF token in LogoutListenerJeremy Mikola2012-02-141-0/+25
| | | | | | On the advice of @schmittjoh, this commit adds a LogoutException class for use by LogoutListener if the CSRF token is invalid. The handling in the Security component's ExceptionListener is modeled after AccessDeniedException, which gets wrapped in an AccessDeniedHttpException in the absence of handler service or error page (I didn't think it was appropriate to re-use those for LogoutException).
* removed unused use statementsFabien Potencier2011-10-291-3/+0
|
* fixed CSFabien Potencier2011-06-084-4/+4
|
* added missing license headersFabien Potencier2011-05-311-0/+9
|
* [Security/Http] better error message when session times out, or cookies are ↵Johannes Schmitt2011-05-141-0/+27
| | | | disabled
* removed empty lines/trailing spacesBrikou CARRE2011-04-152-2/+2
|
* [Security] various changes, see belowJohannes Schmitt2011-03-102-3/+3
| | | | | | - visibility changes from protected to private - AccountInterface -> UserInterface - SecurityContext::vote() -> SecurityContext::isGranted()
* replaced symfony-project.org by symfony.comFabien Potencier2011-03-0617-31/+31
|
* corrected NonceExpiredException namespaceLukas Kahwe Smith2011-02-271-1/+1
|
* [Security/Http] Adds CSRF protection to the form-loginJohannes Schmitt2011-02-161-0/+12
|
* [Security] fixes a bug where authentication errors might have leaked ↵Johannes Schmitt2011-02-141-1/+23
| | | | confidential information
* [Security] bug fix in FormAuthenticationEntryPointJohannes M. Schmitt2011-02-021-1/+1
|
* namespace changesJohannes M. Schmitt2011-01-2617-0/+395
Symfony\Component\Security -> Symfony\Component\Security\Core Symfony\Component\Security\Acl remains unchanged Symfony\Component\HttpKernel\Security -> Symfony\Component\Security\Http