Francis Besset
f91f4dda13
Added the possibility to set cookies with the same name for different domains and paths for Symfony\Component\HttpFoundation\ResponseHeaderBag
...
ResponseHeaderBag::hasCookie() and ResponseHeaderBag::getCookie() were removed
2011-07-11 23:03:26 +02:00
Fabien Potencier
2f51bc3ef3
[Security] fixed tests
2011-07-11 08:28:02 +02:00
Fabien Potencier
4f8a98033a
[Security] removed a hack
2011-07-05 11:00:08 +02:00
Fabien Potencier
cc03b73253
merged branch Herzult/testSecurity (PR #1447 )
...
Commits
-------
164aea4
[Security] Add tests for the channel listener
d51cbc0
[Security] Remove useless attribute in basic authentication listener & test it
91e6dc9
[Security] Add tests for the anonymous authentication listener
3c2affb
[Security] Update access listener constructor's prototype and add tests
81afd77
[Security] Add tests for the firewall map
aa6ae33
[Security] Remove useless attribute & var in firewall
Discussion
----------
Test security
---------------------------------------------------------------------------
by lsmith77 at 2011/06/29 13:41:07 -0700
@schmittjoh is probably the person to review this change ..
2011-07-04 12:47:32 +02:00
Antoine Hérault
164aea448a
[Security] Add tests for the channel listener
2011-06-26 11:56:08 +02:00
Antoine Hérault
d51cbc09b4
[Security] Remove useless attribute in basic authentication listener & test it
2011-06-26 11:29:43 +02:00
Antoine Hérault
91e6dc9fef
[Security] Add tests for the anonymous authentication listener
2011-06-26 11:28:17 +02:00
Antoine Hérault
3c2affb7e7
[Security] Update access listener constructor's prototype and add tests
2011-06-26 10:28:10 +02:00
Antoine Hérault
81afd77ed9
[Security] Add tests for the firewall map
2011-06-26 00:26:42 +02:00
Antoine Hérault
aa6ae33765
[Security] Remove useless attribute & var in firewall
2011-06-25 19:04:35 +02:00
Antoine Hérault
e43cd206b0
[Security] Fix http retry authentication entry point
2011-06-25 18:19:13 +02:00
Antoine Hérault
cb3ad8bb79
[Security] Fix http form authentication entry point
2011-06-25 18:01:08 +02:00
Antoine Hérault
1dfb637858
[Security] Fix http digest authentication entry point
2011-06-25 17:43:23 +02:00
Antoine Hérault
920a209bbc
[Security] Fix http basic authentication entry point
2011-06-25 17:15:23 +02:00
Fabien Potencier
1436d8dab7
[Security] added an HttpUtils class to manage logic related to Requests and Responses
...
This change removes the need for the {_locale} hack.
Now, all paths in the Security component can be:
* An absolute path (/login)
* An absolute URL (http://symfony.com/login )
* A route name (login)
So, if you want to use a path that includes a global parameter (like _locale),
use a route instead of a path.
2011-06-22 14:47:19 +02:00
Fabien Potencier
fa9b920051
[Security] renamed UserProviderInterface::loadUser() to refreshUser()
2011-06-16 18:00:36 +02:00
Pascal Borreli
f5eaa404c7
[Tests] Fixed typos
2011-06-12 20:52:53 +00:00
Fabien Potencier
17cd08dc6c
fixed CS
2011-06-08 19:56:59 +02:00
Fabien Potencier
65200aa86a
added missing license headers
2011-05-31 10:57:06 +02:00
Johannes M. Schmitt
bac3ee86f9
[Security] fixes a regression in the AclVoter
2011-05-30 10:04:46 +02:00
Johannes Schmitt
53f5c23c8f
[Security/Acl] small voter refactoring
2011-05-18 12:48:50 +02:00
Johannes Schmitt
fa0ef500ae
[Tests] updated invalid use statement
2011-05-16 11:57:12 +02:00
Johannes Schmitt
48dc85dc43
[Security/Acl] fixes #853
2011-05-14 14:19:55 +02:00
Brikou CARRE
e898445b94
removed empty lines/trailing spaces
2011-04-15 21:12:02 +02:00
Fabien Potencier
66c4bc727c
[HttpFoundation] renamed Cookie::getExpire() to getExpiresTime() to be consistent with the DomCrawler component
2011-04-13 20:10:39 +02:00
Gustavo Adrian
2e96f2c63d
Fixed exception that was thrown while updating a field ACE
2011-04-05 13:05:20 -03:00
Gustavo Adrian
bedbe51081
[Security] ACL: AclVoter::vote only gets an ObjectIdentity if $object is not an instance of ObjectIdentityInterface
2011-03-24 21:54:21 -03:00
hhamon
230b3fff53
added unit tests for User::equals() method
2011-03-21 09:26:09 +01:00
Bernhard Schussek
466f1b99c5
[Security] Fixed method names in the Firewall listeners
2011-03-17 13:24:23 +01:00
Bernhard Schussek
5f14d8d6aa
Merge remote branch 'symfony/master' into event-manager
...
Conflicts:
src/Symfony/Bundle/AsseticBundle/CacheWarmer/AssetWriterCacheWarmer.php
src/Symfony/Bundle/AsseticBundle/Tests/CacheWarmer/AssetWriterCacheWarmerTest.php
src/Symfony/Bundle/FrameworkBundle/Profiler/ProfilerListener.php
src/Symfony/Bundle/FrameworkBundle/Resources/config/profiling.xml
src/Symfony/Component/HttpKernel/HttpKernel.php
src/Symfony/Component/Security/Http/Firewall/AbstractAuthenticationListener.php
src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php
2011-03-17 12:34:12 +01:00
Johannes M. Schmitt
4539b47522
[Security] small performance optimization
2011-03-14 17:41:33 +01:00
Bernhard Schussek
06c682b4fb
Switched from Doctrine's EventManager implementation to the EventManager clone in Symfony2 (now called EventDispatcher again)
2011-03-13 19:49:10 +01:00
Bernhard Schussek
25931caeab
Merge remote branch 'symfony/master' into event-manager
...
Conflicts:
src/Symfony/Bundle/FrameworkBundle/Debug/TraceableEventManager.php
src/Symfony/Bundle/WebProfilerBundle/WebDebugToolbarListener.php
src/Symfony/Component/Security/Http/Firewall.php
src/Symfony/Component/Security/Http/Firewall/AbstractAuthenticationListener.php
src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php
src/Symfony/Component/Security/Http/Firewall/AccessListener.php
src/Symfony/Component/Security/Http/Firewall/AnonymousAuthenticationListener.php
src/Symfony/Component/Security/Http/Firewall/BasicAuthenticationListener.php
src/Symfony/Component/Security/Http/Firewall/ChannelListener.php
src/Symfony/Component/Security/Http/Firewall/ContextListener.php
src/Symfony/Component/Security/Http/Firewall/DigestAuthenticationListener.php
src/Symfony/Component/Security/Http/Firewall/ExceptionListener.php
src/Symfony/Component/Security/Http/Firewall/ListenerInterface.php
src/Symfony/Component/Security/Http/Firewall/LogoutListener.php
src/Symfony/Component/Security/Http/Firewall/RememberMeListener.php
src/Symfony/Component/Security/Http/Firewall/SwitchUserListener.php
tests/Symfony/Tests/Component/Security/Http/Firewall/RememberMeListenerTest.php
2011-03-13 19:15:25 +01:00
Pascal Borreli
fb33358d20
[Security] Fixed test
2011-03-12 16:17:42 -08:00
Johannes Schmitt
70867f06e9
re-added a __toString method for debugging purposes
2011-03-12 13:24:57 +01:00
Johannes Schmitt
97125269d2
[Security] fixed some tests
2011-03-11 12:50:52 +01:00
Johannes M. Schmitt
3d97638813
[Security] refactored remember-me code
2011-03-11 01:19:55 +01:00
Johannes M. Schmitt
13665fc113
[Security] added some more tests
2011-03-10 10:25:33 +01:00
Johannes Schmitt
1d5538fc60
[Security] various changes, see below
...
- visibility changes from protected to private
- AccountInterface -> UserInterface
- SecurityContext::vote() -> SecurityContext::isGranted()
2011-03-10 10:25:32 +01:00
Bernhard Schussek
2cf3779a2c
Renamed EventArgs classes and adapted remaining code to EventManager
...
The only missing part is ContainerAwareEventManager::addEventSubscriberService(),
because I'm not sure how to find out the class name of a service in the DIC.
Also, inline documentation of this code needs to be finished once it is accepted.
2011-03-07 19:16:05 +01:00
Kris Wallsmith
2d1d2ba893
[Security] cleaned up opt-in to benchmark test
2011-03-06 20:06:13 +01:00
Fabien Potencier
8c423edfef
replaced symfony-project.org by symfony.com
2011-03-06 12:40:06 +01:00
Fabien Potencier
a137d72351
Merge remote branch 'hhamon/cookie_path_fix'
...
* hhamon/cookie_path_fix:
[Security] renamed Cookie::isHttponly() to Cookie::isHttpOnly()
[HttpKernel] renamed Cookie::isHttponly() to Cookie::isHttpOnly()
[BrowserKit] renamed Cookie::isHttponly() to Cookie::isHttpOnly()
[HttpFoundation] fix cookie path default value to / and added some new unit tests to cover the class
2011-03-06 10:44:40 +01:00
Johannes Schmitt
f82b89cdc5
[Security] changed defaults for MessageDigestEncoder
...
- encode_as_base64 set to true
- iterations increased to 5000 from 1
2011-03-05 13:45:35 +01:00
Hugo Hamon
cd5d1bd62e
[Security] renamed Cookie::isHttponly() to Cookie::isHttpOnly()
2011-03-03 14:52:53 +01:00
Johannes Schmitt
97ee92e7b0
Merge branch 'CopyTokenAttributesInProviders' of https://github.com/opensky/symfony into opensky-CopyTokenAttributesInProviders
2011-02-26 21:47:57 +01:00
Johannes Schmitt
621a79f1f2
[Security] added method to retrieve the configured remember-me parameter
2011-02-26 21:44:40 +01:00
Jeremy Mikola
5113886f34
[Security] Copy token attributes when auth providers create a new token from another
...
PreAuthenticatedAuthenticationProvider and UserAuthenticationProvider tend to copy a token instead of modifying it during their authenticate() methods, which is probably a good idea if the token might be immutable. Ensure that the token's attributes get copied along with everything else.
2011-02-23 16:03:01 -05:00
Johannes M. Schmitt
53f3ff8258
[Security] adds a chain user provider
2011-02-16 23:00:27 +01:00
Jeremy Mikola
cc4eb6b40f
[Security] Add providerKey to PreAuthenticatedToken tokens constructed by PreAuthenticatedAuthenticationProvider
2011-02-15 21:55:24 +01:00