155 Commits

Author SHA1 Message Date
kenjis
9e6d34f553
Merge pull request #8287 from kenjis/remove-Security-methods
refactor: remove deprecated methods in Security
2023-12-07 09:42:19 +09:00
kenjis
18259c2570
refactor: remove deprecated SecurityInterface::isExpired() 2023-12-04 12:04:33 +09:00
kenjis
846ac3f0a0
refactor: remove deprecated methods in Security 2023-12-04 11:59:31 +09:00
kenjis
25ec3df976
refactor: add declare(strict_types=1) to system files 2023-11-30 16:14:48 +09:00
kenjis
7149fa5d8c
refactor: use HTTP\Method constants 2023-11-19 20:03:45 +09:00
kenjis
5bd6cbbceb
refactor: remove strtoupper()/strtolower() for $request->getMethod() 2023-11-19 20:03:41 +09:00
michalsn
be07d9c98f
make phpstan happy 2023-09-15 10:29:19 +02:00
michalsn
a63457f069
apply changes from code review 2023-09-15 10:29:19 +02:00
michalsn
4335c6be16
implement missing changes from the code review 2023-09-15 10:29:19 +02:00
michalsn
ca6c800d5c
implement changes from code review 2023-09-15 10:29:18 +02:00
michalsn
c48f34b523
fix: check for CSRF token in the raw body 2023-09-15 10:29:18 +02:00
kenjis
6329255a8b
docs: add "see test" annotations 2023-09-08 17:35:23 +09:00
kenjis
d9bb12448f
Merge remote-tracking branch 'upstream/develop' into 4.4
Conflicts:
	system/Helpers/cookie_helper.php
	system/Session/Handlers/RedisHandler.php
2023-08-10 10:03:41 +09:00
ping-yee
61f8bd5882
Dev: change the comment. 2023-08-07 18:16:18 +08:00
ping-yee
a9328774d1
Dev: Add the param type. 2023-08-04 21:38:25 +08:00
ping-yee
336a86a9b0
Dev: Define the Security and Validation exception. 2023-08-04 21:28:50 +08:00
ping-yee
f1c9caf96a
dev: change the return type. 2023-08-04 13:20:18 +08:00
ping-yee
a826f93c95
Dev: Remove the Security and Validation ignore errors in phpstan-baseline.php 2023-08-04 01:00:42 +08:00
kenjis
a9554b3502
refactor: [BC] change Security constructor param from Config\App to Config\Security 2023-06-29 08:02:13 +09:00
kenjis
a0665df042
refactor: add property for SecurityConfig and use it 2023-06-29 08:02:13 +09:00
kenjis
afeb419d06
refactor: remove CSRF config items in Config\App 2023-06-29 08:02:12 +09:00
kenjis
e8be829abd
refactor: use ::class to config() param 2023-06-26 14:56:45 +09:00
kenjis
02bc22c0a3
Merge remote-tracking branch 'upstream/develop' into 4.4
Conflicts:
	system/Commands/Generators/MigrationGenerator.php
	system/Commands/Utilities/Routes.php
	system/Config/Services.php
	system/HTTP/Response.php
	system/Helpers/cookie_helper.php
	system/Security/Security.php
	system/Session/Handlers/BaseHandler.php
	system/Session/Handlers/DatabaseHandler.php
	system/Session/Handlers/MemcachedHandler.php
	system/Session/Handlers/RedisHandler.php
	system/Session/Session.php
	system/Test/CIUnitTestCase.php
	system/Test/FeatureTestCase.php
	user_guide_src/source/database/configuration.rst
2023-06-26 10:04:55 +09:00
kenjis
3bdb53f374
refactor: use ::class to config() param 2023-06-24 09:20:24 +09:00
kenjis
f444086451
Merge remote-tracking branch 'upstream/develop' into 4.4 2023-03-31 10:34:26 +09:00
kenjis
c3d8020c84
refactor: rename variable name 2023-03-24 16:04:32 +09:00
kenjis
77d31409af
refactor: use early return 2023-03-24 16:03:09 +09:00
kenjis
d3f06e9649
refactor: private method 2023-02-05 13:31:53 +09:00
kenjis
967f1d80e2
refactor: remove Cookie config items in Config\App 2023-02-05 13:31:53 +09:00
kenjis
c9bde3d2f6
Merge remote-tracking branch 'upstream/develop' into 4.3
Conflicts:
	system/Security/Security.php
2022-11-17 06:29:15 +09:00
ddevsr
2b4861e21e
refactor: changes time() to Time class 2022-11-16 15:28:11 +07:00
kenjis
7379b67b26
docs: replace Response with ResponseInterface in doc comments 2022-10-08 18:56:49 +09:00
kenjis
bf55cde458
Merge remote-tracking branch 'upstream/develop' into 4.3
Conflicts:
	system/CLI/CommandRunner.php
	system/CLI/Console.php
	system/Database/Forge.php
	system/I18n/Time.php
	system/Validation/Validation.php
2022-09-09 11:26:23 +09:00
John Paul E. Balandan, CPA
0d08a92d83
Add order option to phpdoc_order 2022-09-08 14:40:53 +08:00
kenjis
199a4cba32
Merge remote-tracking branch 'upstream/develop' into 4.3 2022-08-29 07:51:17 +09:00
kenjis
b53d482699
fix: remove harmful @mixin in RequestInterface
In a class that implements RequestInterface, a method that does not actually exist was displayed
in the IDE as if it existed.
2022-08-27 11:59:13 +09:00
kenjis
44524eed8d
Merge pull request #6406 from kenjis/fix-csrf-redirect-default
config: change Security::$redirect to false
2022-08-25 21:04:25 +09:00
kenjis
4375928017
config: change Securiry::$redirect to false
It is difficult to know what happened for devs.
2022-08-22 15:59:53 +09:00
kenjis
a791973c64
fix: SecurityException implements HTTPExceptionInterface 2022-08-22 08:53:17 +09:00
kenjis
4441fd188d
feat: add public method to regenerate CSRF token 2022-08-06 05:48:48 +09:00
kenjis
2b890fe867
docs: add doc comments 2022-07-31 16:21:48 +09:00
kenjis
f4c1fa4cc7
refactor: extract removeTokenInRequest() method 2022-07-31 16:08:35 +09:00
kenjis
01842619d0
refactor: generateHash() always generate new hash 2022-07-31 16:05:29 +09:00
kenjis
e056312d0c
refactor: extract restoreHash() method 2022-07-31 16:02:11 +09:00
kenjis
06f4cebe35
refactor: move if 2022-07-31 15:58:43 +09:00
kenjis
333290dfea
refactor: remove $_COOKIE 2022-07-31 15:56:11 +09:00
kenjis
38c8cbf47f
fix: Security::derandomize() may cause hex2bin() error 2022-07-24 07:33:22 +09:00
kenjis
e9220c0be9
refactor: fix variable name 2022-02-25 16:26:28 +09:00
kenjis
ee0e6f1f8c
refactor: remove if 2022-02-25 16:24:40 +09:00
kenjis
143cf3545b
fix: TypeError when $tokenRandomize = true and no token posted 2022-02-25 09:21:40 +09:00