95 Commits

Author SHA1 Message Date
bf6c9cf443 Fixes #15783: Regenerate CSRF token only when logging in directly 2018-03-05 02:00:07 +03:00
2e55570e1f Fixes #15621: Fixed yii\web\User::getIdentity() returning null if an exception had been thrown when it was called previously 2018-02-09 01:34:33 +03:00
6c0540aa2d Fixes #15496: CSRF token is now regenerated on changing identity 2018-01-14 02:13:24 +03:00
3c017b6b61 Fixes #15462: Fixed accessChecker configuration error 2018-01-13 20:49:33 +03:00
64d8af61a6 Fixes for PHP 7.2 compatibility (#14959) 2017-10-19 01:54:40 +03:00
3ee7629f13 Fixes #13486: Use DI container to instantiate cookies in order to be able to set defaults 2017-10-05 14:41:46 +02:00
368540f8d0 Added tests 2017-08-13 21:15:06 +03:00
b6a5697c00 User can login by cookie only once when autoRenewCookie is set to false 2017-08-13 21:15:02 +03:00
fe8a0a6a2e Enable no_useless_else rule in php-cs-fixer (#14420) 2017-07-10 11:26:21 +03:00
ba0ab403b5 Added php-cs-fixer coding standards validation to Travis CI (#14100)
* php-cs-fixer: PSR2 rule.

* php-cs-fixer: PSR2 rule - fix views.

* Travis setup refactoring.

* Add php-cs-fixer to travis cs tests.

* Fix tests on hhvm-3.12

* improve travis config

* composer update

* revert composer update

* improve travis config

* Fix CS.

* Extract config to separate classes.

* Extract config to separate classes.

* Add file header.

* Force short array syntax.

* binary_operator_spaces fixer

* Fix broken tests

* cast_spaces fixer

* concat_space fixer

* dir_constant fixer

* ereg_to_preg fixer

* function_typehint_space fixer

* hash_to_slash_comment fixer

* is_null fixer

* linebreak_after_opening_tag fixer

* lowercase_cast fixer

* magic_constant_casing fixer

* modernize_types_casting fixer

* native_function_casing fixer

* new_with_braces fixer

* no_alias_functions fixer

* no_blank_lines_after_class_opening fixer

* no_blank_lines_after_phpdoc fixer

* no_empty_comment fixer

* no_empty_phpdoc fixer

* no_empty_statement fixer

* no_extra_consecutive_blank_lines fixer

* no_leading_import_slash fixer

* no_leading_namespace_whitespace fixer

* no_mixed_echo_print fixer

* no_multiline_whitespace_around_double_arrow fixer

* no_multiline_whitespace_before_semicolons fixer

* no_php4_constructor fixer

* no_short_bool_cast fixer

* no_singleline_whitespace_before_semicolons fixer

* no_spaces_around_offset fixer

* no_trailing_comma_in_list_call fixer

* no_trailing_comma_in_singleline_array fixer

* no_unneeded_control_parentheses fixer

* no_unused_imports fixer

* no_useless_return fixer

* no_whitespace_before_comma_in_array fixer

* no_whitespace_in_blank_line fixer

* not_operator_with_successor_space fixer

* object_operator_without_whitespace fixer

* ordered_imports fixer

* php_unit_construct fixer

* php_unit_dedicate_assert fixer

* php_unit_fqcn_annotation fixer

* phpdoc_indent fixer

* phpdoc_no_access fixer

* phpdoc_no_empty_return fixer

* phpdoc_no_package fixer

* phpdoc_no_useless_inheritdoc fixer

* Fix broken tests

* phpdoc_return_self_reference fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_single_line_var_spacing fixer

* phpdoc_to_comment fixer

* phpdoc_trim fixer

* phpdoc_var_without_name fixer

* psr4 fixer

* self_accessor fixer

* short_scalar_cast fixer

* single_blank_line_before_namespace fixer

* single_quote fixer

* standardize_not_equals fixer

* ternary_operator_spaces fixer

* trailing_comma_in_multiline_array fixer

* trim_array_spaces fixer

* protected_to_private fixer

* unary_operator_spaces fixer

* whitespace_after_comma_in_array fixer

* `parent::setRules()` -> `$this->setRules()`

* blank_line_after_opening_tag fixer

* Update finder config.

* Revert changes for YiiRequirementChecker.

* Fix array formatting.

* Add missing import.

* Fix CS for new code merged from master.

* Fix some indentation issues.
2017-06-12 12:25:45 +03:00
a626440761 Reverted #13822, clarified exception descriptions 2017-03-30 16:50:18 +03:00
7a2f04ae32 Fixes #13822: Fixed yii\web\User::loginRequired() to throw an UnauthorizedHttpException instead of a ForbiddenHttpException 2017-03-23 00:18:39 +03:00
c19b2f7dc8 release version 2.0.11 2017-02-01 17:46:29 +01:00
b8b3aeeb00 update deprecated phpdoc messages 2016-11-22 16:03:28 +01:00
7a3a342127 Fix errors reported by apidoc extension. (#12986) 2016-11-13 14:51:21 +01:00
95f2c82009 Fixed the cryptic unstructured doc block (#12978) [skip ci] 2016-11-12 17:05:13 +03:00
4aa935e69e Fixes #12055: Changed boolean to bool and integer to int in phpdoc 2016-11-07 02:51:39 +03:00
11fe407ad0 release version 2.0.10 2016-10-20 14:02:50 +02:00
10462f1a81 Cosmetic changes 2016-08-28 03:28:57 +03:00
98b6851c41 Update User.php
A Few spelling corrections.
2016-08-25 09:59:58 +01:00
91c67262ce Fix typo (#11998) [skip ci] 2016-07-21 15:02:54 +03:00
c5b87fd932 Updated deprecation notice 2016-06-12 23:26:41 +03:00
03e23adab8 Fixes #11679: Extracted CheckAccessInterface from ManagerInterface 2016-06-09 15:15:44 +03:00
9d327baa8b coding style fixes 2016-05-26 11:19:32 +02:00
38be74446e Update PHPDoc, CHANGELOG, UPGRADE.md 2016-05-22 12:54:29 +03:00
7249a6c99e Move Identity Cookie code into separate functions 2016-05-22 12:12:04 +03:00
0ff6eeba7d Enhanced 9f499eb: yii\web\User::checkRedirectAcceptable() removed check for "*" type (invalid in accept header) 2016-05-16 01:11:47 +03:00
9f499eb51e Fixed yii\web\User::checkRedirectAcceptable() to treat acceptable content type */* as *
Closes #11523
2016-05-15 22:27:40 +03:00
5bd35c344c dont set return url, if request method is not GET 2016-04-22 22:21:31 +03:00
ad6047e09f Fixes #10480: Fixed removing old identity cookie when loggin in as another user without logging out first 2016-04-12 02:19:34 +03:00
9a73593908 yii\web\User - updated PHPDoc 2016-03-23 00:08:07 +02:00
c7436909f4 Added optional $checkHeader param to loginRequired for checking the Accept header; defaults to true.
Added changelog line.

Fixed DbSessionTest

Added version annotations.

Improvements to phpdoc and whitespace.
2016-03-23 00:08:01 +02:00
cd87d67f34 Global DOCS update: ~~~ replaced with ``` 2015-12-02 23:15:28 +02:00
0712bad090 Fixes #9846: Fixed yii\web\User::loginRequired() should throw 401 not 403 (reverted from commit 4e715f9d65e75853866b19c1f968b4d9c7969ae7)
See https://github.com/yiisoft/yii2/issues/9846#issuecomment-146891825
2015-10-09 22:13:39 +03:00
4e715f9d65 Fixes #9846: Fixed yii\web\User::loginRequired() should throw 401 not 403 2015-10-07 18:16:42 +03:00
bc543db206 fix doc 2015-09-28 15:25:29 +02:00
223b0bea5d Fixes #9369: Yii::$app->user->can() now returns false instead of erroring in case authManager component is not configured 2015-08-11 11:16:21 +03:00
a2568d1ec8 updated some comments and @since annotations 2015-08-02 19:56:49 +02:00
025845e660 performance: unnecessary (when result is cached) getAuthManager() removed 2015-07-09 19:22:36 +02:00
ae42a054bb PSR-2 spaces, commas, etc 2015-06-09 00:05:06 +03:00
0802d3eb60 added more detailed comment for #8556 2015-06-01 15:44:07 +02:00
acb7b2ebbb Fixes #8556: Extracted yii\web\User::getAuthManager() method 2015-05-31 12:46:38 +03:00
0c599b1ee1 Fixes #5480: Added defensive code to yii\web\User::getIdentity() to avoid potential infinite recursion 2014-11-27 21:55:28 -05:00
e2b6cb69b0 Fixes #4889: Application was getting into redirect loop when user wasn't allowed accessing login page. Now shows 403 2014-11-07 03:01:05 +03:00
48ec791e4a Fixes #5587: json_encode is now used with JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE where it makes sense, also it is now default for Json::encode() 2014-10-19 18:50:46 +04:00
851d15380f Fixes #5131: Added $autoRenew parameter to yii\web\User::getIdentity() 2014-09-22 17:58:58 -04:00
090e550a3d Rename \yii\web\User component param for consistency 2014-09-10 05:55:07 +04:00
f3105f736a Fixes #3283: Added $checkAjax to yii\web\User::loginRequired() 2014-08-26 22:29:40 -04:00
0cdf2f5171 Fixed code break. 2014-08-06 10:27:37 -04:00
dee0382c1f Added yii\base\InvalidValueException.
Refactored `yii\web\User`.
2014-08-06 10:07:14 -04:00