summaryrefslogtreecommitdiffstats
path: root/Tests/Http/RememberMe
Commit message (Collapse)AuthorAgeFilesLines
* [appveyor] Fix failure reportingNicolas Grekas2016-02-011-0/+9
|
* Static code analysisKonstantin.Myakshin2016-01-251-2/+1
|
* [2.3][SECURITY] Add remember me cookie configurationKlaas Cuvelier2015-10-063-24/+0
|
* bug #14842 [Security][bugfix] "Remember me" cookie cleared on logout with ↵Fabien Potencier2015-10-053-5/+49
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | custom "secure"/"httponly" config options [1] (MacDada) This PR was squashed before being merged into the 2.3 branch (closes #14842). Discussion ---------- [Security][bugfix] "Remember me" cookie cleared on logout with custom "secure"/"httponly" config options [1] | Q | A | ------------- | --- | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #14822 | License | MIT | Doc PR | ~ * test now always pass "secure" and "httponly" options, as they are required * could be considered BC, but [`RememberMeFactory` passes them](https://github.com/symfony/symfony/blob/2.3/src/Symfony/Bundle/SecurityBundle/DependencyInjection/Security/Factory/RememberMeFactory.php#L21), so they should've always been treated as required * I can squash the commits before merging * Alternative solution: #14843 Commits ------- 18b1c6a [Security][bugfix] "Remember me" cookie cleared on logout with custom "secure"/"httponly" config options [1]
| * [Security][bugfix] "Remember me" cookie cleared on logout with custom ↵Dawid Nowak2015-10-053-5/+49
| | | | | | | | "secure"/"httponly" config options [1]
* | Standardize the name of the exception variablesJavier Eguiluz2015-06-151-1/+1
|/
* minor #14670 [Security] TokenBasedRememberMeServices test to show why ↵v2.3.30v2.3.29Fabien Potencier2015-05-211-3/+16
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | encoding username is required (MacDada) This PR was squashed before being merged into the 2.3 branch (closes #14670). Discussion ---------- [Security] TokenBasedRememberMeServices test to show why encoding username is required | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #14577 | License | MIT | Doc PR | no 241538d shows that it's not actually tested, 257b796 reimplements it with test. I can remove the POC commit if it's not needed. Commits ------- 63a9736 [Security] TokenBasedRememberMeServices test to show why encoding username is required
| * [Security] TokenBasedRememberMeServices test to show why encoding username ↵Dawid Nowak2015-05-211-3/+16
| | | | | | | | is required
* | [Security] AbstractRememberMeServices::encodeCookie() validates cookie partsDawid Nowak2015-05-211-0/+34
|/
* CS: Binary operators should be arounded by at least one spaceDariusz Ruminski2015-03-271-2/+2
|
* minor #13206 [2.3] Cleanup deprecations (nicolas-grekas)Fabien Potencier2015-01-034-28/+0
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 2.3 branch. Discussion ---------- [2.3] Cleanup deprecations | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | let's see | Fixed tickets | - | License | MIT | Doc PR | - Commits ------- d649bef [2.3] Remove useless tests skips 1d68ad3 [2.3] Cleanup deprecations
| * [2.3] Remove useless tests skipsNicolas Grekas2015-01-034-28/+0
| |
* | adapted previous commit for 2.3Fabien Potencier2015-01-031-1/+0
| |
* | [Security] Don't send remember cookie for sub requestblanchonvincent2015-01-031-2/+20
|/
* Fix phpdoc and coding standardsChristophe Coevoet2014-12-292-2/+0
| | | | | | This removes the unused use statements which were not catched by PHP-CS-Fixer because of string occurences. It also fixes some invalid phpdoc (scalar is not recognized as a valid type for instance).
* CS fixesGraham Campbell2014-12-032-2/+0
|
* Remove aligned '=>' and '='Disquedur2014-10-262-2/+2
|
* fixed CSFabien Potencier2014-09-223-3/+4
|
* fixed various inconsistenciesv2.3.10Fabien Potencier2014-02-114-33/+33
|
* Merge branch '2.2' into 2.3Fabien Potencier2013-09-191-1/+0
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.2: Fix some annotates [FrameworkBundle] made sure that the debug event dispatcher is used everywhere [HttpKernel] remove unneeded strtoupper updated the composer install command to reflect changes in Composer Conflicts: src/Symfony/Component/Console/Application.php src/Symfony/Component/Console/Command/Command.php src/Symfony/Component/Console/Input/InputDefinition.php src/Symfony/Component/CssSelector/Node/CombinedSelectorNode.php src/Symfony/Component/Form/Form.php src/Symfony/Component/HttpKernel/Debug/ErrorHandler.php src/Symfony/Component/HttpKernel/DependencyInjection/RegisterListenersPass.php src/Symfony/Component/HttpKernel/Tests/DependencyInjection/RegisterListenersPassTest.php src/Symfony/Component/Locale/Locale.php src/Symfony/Component/Locale/README.md src/Symfony/Component/Locale/Stub/DateFormat/FullTransformer.php
| * Fix some annotatesbronze1man2013-09-191-1/+0
| |
* | [Security] Added tests for the remember me ReponseListener.Jakub Zalas2013-05-241-0/+92
|/
* Try to make sure cookies get deleted from the TokenProvider when no longer ↵Terje Bråten2012-11-212-9/+9
| | | | in use
* [Security] fixed tests when OpenSSL is not installedFabien Potencier2012-10-281-1/+1
|
* moved the secure random dep for remember me as a constructor argumentFabien Potencier2012-10-281-4/+1
|
* renamed Prng to SecureRandomFabien Potencier2012-10-281-2/+2
|
* moved the secure random class from JMSSecurityExtraBundle to Symfony (closes ↵Fabien Potencier2012-10-281-1/+5
| | | | #3595)
* updated license blocksEriksen Costa2012-03-313-9/+9
|
* moved component and bridge unit tests to the src/ directoryFabien Potencier2012-03-293-0/+883
This is the first step to make each Symfony Component and Bridge self-contained.