The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Update version number in composer.json
- Drop PHP support for versions < 7.4
- Upgrade PHPUnit from 8.x to 9.x
- Add Optional Redis Storage
- Improve cookie handling (add same site and secure attributes)
- Make hashing function configurable
- Drop PHP support for versions < 7.2
- Upgrade PHPUnit and PHP Code Sniffer
- Upgrade to Symfony Coding Standard 3.x
- Make
PDOStorageTest
independent from MySQL by using an in-memory database. - Create date in PHP instead of using the
NOW()
SQL function. - Add example SQL statements
- Fix
PDOStorage
test. Test is still dependent on an existing MySQL database but at least it works again. - Hash database values in PHP instead of SQL.
CookieInterface
TokenInterface
for different token generation methods- PHPCS coding style checks
- composer scripts:
test
runs the unit testscs
runs the coding style checksci
runs bothcs
andtest
Authenticator::login
no longer returns bool/credentials. Instead, it returns aLoginResult
instance that can be queried for the login state and the credentials from the remember me cookie.- Rewritten example to use a picoframework
- Update PHPUnit dependency to 5.7
- Check in
composer.lock
- All classes that use the
StorageInterface
now have aStorage
suffix.
Authenticator::generateToken
- If you've subclassed it with your own method, please create aTokenInterface
implementation instead and pass it in as a dependency.Authenticatot::cookieIsValid
- Thelogin
function now gives more high-level information on the login result.Authenticatot::loginTokenWasInvalid
- UsehasPossibleManipulation
method oflogin
result object instead.
- Changed method for generating tokens to
random_bytes
instead ofuniquid
, with backwards compatibility library for PHP < 7.0. This'll improve security for new tokens. - Adjust tests to be ready for PHPUnit 5.7
- Fixed SQL in storage adapter.
- Fixed race condition when generating new tokens.
- Check expiry date of tokens in SQL storage adapter.
- Improved security documentation.
- Add MIT license file
- Fixed composer.json
- First release