116 Commits

Author SHA1 Message Date
97a4d711ec Merge branch 'master' into sync-master-2052. 2025-04-26 19:03:07 -04:00
52e4a3e645 release version 2.0.50 2024-05-30 20:23:31 +03:00
20d6c65db2 Merge branch 'master' into sync-to-master. 2024-03-20 06:11:31 -03:00
e2a167028b Upgrade to PSR12 coding standard (#20121) 2024-03-19 17:21:27 +03:00
12591df645 Remove deprecated methods to User::class. 2023-09-22 18:48:30 -03:00
22614a5b1f release version 2.0.46 2022-08-19 01:18:45 +03:00
161526cd41 HTTPS everywhere (#19503) 2022-08-03 12:32:18 +03:00
a87c02c712 Fix more types (#19333)
* Migration::upsert() returns void

* Unneeded `@property` tags

* Add missing `null` param/return types

* Null types for db\Query + db\ActiveQuery

* Fixed testSelect

* Null types for Validator

* Several more null types

* One more

* Make AccessRule::$allow always a boolean

It doesn't have any special null handling, so it's safe to default to false

* Validator::$skipOnEmpty is always a boolean

* Catch all throwable from Widget::widget()

* Don't limit $previous args to \Exception

The actual \Exception allows $previous to be any throwable in PHP 7+

* Add Throwable catch block to Instance::get()

* Throwable cleanup

Comment changes only.

- Document \Throwable instead of \Exception wherever appropriate
- Removed redundant exception/error classes when \Throwable is referenced

* Yii::setlogger() accepts null

* ArrayHelper::removeValue() can remove any type of value

* Change default $allow value to false
2022-04-03 11:20:21 +02:00
4628b91e73 Fix types (#19332)
* Migration::upsert() returns void

* Unneeded `@property` tags

* Add missing `null` param/return types

* Null types for db\Query + db\ActiveQuery

* Fixed testSelect
2022-03-30 18:40:10 +02:00
655786b7ed release version 2.0.44 2021-12-30 10:50:56 +03:00
12763a146e Fix #19067: Fix constant session regeneration (#19113)
* Fix constant session regeneration
* Add tests for session ID, always regenerating session ID for switching identity
2021-12-29 12:45:13 +03:00
c94d7049c5 Issue #18646 Cleanup auth data from session if findIdentity() returns… (#18649)
* Issue #18646 Cleanup auth data from session if findIdentity() returns null

* Issue #18646 Refactor fix to remove stale identity data from session

* Issue #18646 Fix test for HttpBasicAuth (#15658)

Co-authored-by: Alexander Makarov <sam@rmcreative.ru>
Co-authored-by: Bizley <pawel@positive.codes>
2021-08-11 10:35:01 +02:00
540a9011af release version 2.0.43 2021-08-09 20:38:43 +03:00
fd7373f1c6 Make docs gender agnostics (#18781) 2021-07-25 15:44:56 +02:00
0cd68a330d Fix #18669: Changed visibility of yii\web\User::checkRedirectAcceptable() to public 2021-05-23 17:37:01 +03:00
4e2045c040 release version 2.0.41 2021-03-04 00:51:35 +03:00
3883d73cea Fix #9718: Fix user staying authorized despite authKey change 2021-03-03 13:18:06 +03:00
ccb14ff667 release version 2.0.39 2020-11-10 13:58:35 +03:00
eb7b23d117 Fix #18048: Use Instance::ensure() to set User::$accessChecker 2020-05-19 18:42:13 +03:00
378f9ad598 Fix #17424: Subdomain support for User::loginRequired 2019-07-18 11:46:05 +03:00
0b61f9ba3b Fixes #16301: Fixed yii\web\User::setIdentity() to clear access check cache while setting identity object to null 2018-05-21 22:19:49 +05:00
bf6c9cf443 Fixes #15783: Regenerate CSRF token only when logging in directly 2018-03-05 02:00:07 +03:00
2e55570e1f Fixes #15621: Fixed yii\web\User::getIdentity() returning null if an exception had been thrown when it was called previously 2018-02-09 01:34:33 +03:00
6c0540aa2d Fixes #15496: CSRF token is now regenerated on changing identity 2018-01-14 02:13:24 +03:00
3c017b6b61 Fixes #15462: Fixed accessChecker configuration error 2018-01-13 20:49:33 +03:00
64d8af61a6 Fixes for PHP 7.2 compatibility (#14959) 2017-10-19 01:54:40 +03:00
3ee7629f13 Fixes #13486: Use DI container to instantiate cookies in order to be able to set defaults 2017-10-05 14:41:46 +02:00
368540f8d0 Added tests 2017-08-13 21:15:06 +03:00
b6a5697c00 User can login by cookie only once when autoRenewCookie is set to false 2017-08-13 21:15:02 +03:00
fe8a0a6a2e Enable no_useless_else rule in php-cs-fixer (#14420) 2017-07-10 11:26:21 +03:00
ba0ab403b5 Added php-cs-fixer coding standards validation to Travis CI (#14100)
* php-cs-fixer: PSR2 rule.

* php-cs-fixer: PSR2 rule - fix views.

* Travis setup refactoring.

* Add php-cs-fixer to travis cs tests.

* Fix tests on hhvm-3.12

* improve travis config

* composer update

* revert composer update

* improve travis config

* Fix CS.

* Extract config to separate classes.

* Extract config to separate classes.

* Add file header.

* Force short array syntax.

* binary_operator_spaces fixer

* Fix broken tests

* cast_spaces fixer

* concat_space fixer

* dir_constant fixer

* ereg_to_preg fixer

* function_typehint_space fixer

* hash_to_slash_comment fixer

* is_null fixer

* linebreak_after_opening_tag fixer

* lowercase_cast fixer

* magic_constant_casing fixer

* modernize_types_casting fixer

* native_function_casing fixer

* new_with_braces fixer

* no_alias_functions fixer

* no_blank_lines_after_class_opening fixer

* no_blank_lines_after_phpdoc fixer

* no_empty_comment fixer

* no_empty_phpdoc fixer

* no_empty_statement fixer

* no_extra_consecutive_blank_lines fixer

* no_leading_import_slash fixer

* no_leading_namespace_whitespace fixer

* no_mixed_echo_print fixer

* no_multiline_whitespace_around_double_arrow fixer

* no_multiline_whitespace_before_semicolons fixer

* no_php4_constructor fixer

* no_short_bool_cast fixer

* no_singleline_whitespace_before_semicolons fixer

* no_spaces_around_offset fixer

* no_trailing_comma_in_list_call fixer

* no_trailing_comma_in_singleline_array fixer

* no_unneeded_control_parentheses fixer

* no_unused_imports fixer

* no_useless_return fixer

* no_whitespace_before_comma_in_array fixer

* no_whitespace_in_blank_line fixer

* not_operator_with_successor_space fixer

* object_operator_without_whitespace fixer

* ordered_imports fixer

* php_unit_construct fixer

* php_unit_dedicate_assert fixer

* php_unit_fqcn_annotation fixer

* phpdoc_indent fixer

* phpdoc_no_access fixer

* phpdoc_no_empty_return fixer

* phpdoc_no_package fixer

* phpdoc_no_useless_inheritdoc fixer

* Fix broken tests

* phpdoc_return_self_reference fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_to_comment fixer

* phpdoc_trim fixer

* phpdoc_var_without_name fixer

* psr4 fixer

* self_accessor fixer

* short_scalar_cast fixer

* single_blank_line_before_namespace fixer

* single_quote fixer

* standardize_not_equals fixer

* ternary_operator_spaces fixer

* trailing_comma_in_multiline_array fixer

* trim_array_spaces fixer

* protected_to_private fixer

* unary_operator_spaces fixer

* whitespace_after_comma_in_array fixer

* `parent::setRules()` -> `$this->setRules()`

* blank_line_after_opening_tag fixer

* Update finder config.

* Revert changes for YiiRequirementChecker.

* Fix array formatting.

* Add missing import.

* Fix CS for new code merged from master.

* Fix some indentation issues.
2017-06-12 12:25:45 +03:00
a626440761 Reverted #13822, clarified exception descriptions 2017-03-30 16:50:18 +03:00
7a2f04ae32 Fixes #13822: Fixed yii\web\User::loginRequired() to throw an UnauthorizedHttpException instead of a ForbiddenHttpException 2017-03-23 00:18:39 +03:00
c19b2f7dc8 release version 2.0.11 2017-02-01 17:46:29 +01:00
b8b3aeeb00 update deprecated phpdoc messages 2016-11-22 16:03:28 +01:00
7a3a342127 Fix errors reported by apidoc extension. (#12986) 2016-11-13 14:51:21 +01:00
95f2c82009 Fixed the cryptic unstructured doc block (#12978) [skip ci] 2016-11-12 17:05:13 +03:00
4aa935e69e Fixes #12055: Changed boolean to bool and integer to int in phpdoc 2016-11-07 02:51:39 +03:00
11fe407ad0 release version 2.0.10 2016-10-20 14:02:50 +02:00
10462f1a81 Cosmetic changes 2016-08-28 03:28:57 +03:00
98b6851c41 Update User.php
A Few spelling corrections.
2016-08-25 09:59:58 +01:00
91c67262ce Fix typo (#11998) [skip ci] 2016-07-21 15:02:54 +03:00
c5b87fd932 Updated deprecation notice 2016-06-12 23:26:41 +03:00
03e23adab8 Fixes #11679: Extracted CheckAccessInterface from ManagerInterface 2016-06-09 15:15:44 +03:00
9d327baa8b coding style fixes 2016-05-26 11:19:32 +02:00
38be74446e Update PHPDoc, CHANGELOG, UPGRADE.md 2016-05-22 12:54:29 +03:00
7249a6c99e Move Identity Cookie code into separate functions 2016-05-22 12:12:04 +03:00
0ff6eeba7d Enhanced 9f499eb: yii\web\User::checkRedirectAcceptable() removed check for "*" type (invalid in accept header) 2016-05-16 01:11:47 +03:00
9f499eb51e Fixed yii\web\User::checkRedirectAcceptable() to treat acceptable content type */* as *
Closes #11523
2016-05-15 22:27:40 +03:00
5bd35c344c dont set return url, if request method is not GET 2016-04-22 22:21:31 +03:00