Startsida Utforska Hjälp
Logga in
kevin
/
anissah
1
0
Fork 0
Filer Ärenden 0 Pull-förfrågningar 0 Wiki
Träd: 9312edc3ae
Grenar Taggar
anissah
/
user
/
plugins
/
login
/
CHANGELOG.md

CHANGELOG.md 17 KB
Historik Rå

v2.8.0

11/12/2018

  1. [](#new)
    • Store remember me triplets into user://data/rememberme instead of storing them into the cache
    • Ability to register + authorize but require accounts to be manually enabled #180
  2. [](#improved)
    • If login on registration or activation has been turned on, use login redirect if override is not set
    • Don’t set default templates for register and unauthorized, use overridable templates #179
    • Updated de.yaml #175
    • Updated ru.yaml #176
  3. [](#bugfix)
    • Fixed broken remember me functionality
    • Fixed client side validation in login forms
    • Fix uppercase and Unicode username handling #177

v2.7.3

06/20/2018

  1. [](#bugfix)
    • Fixed regression with redirect_after_login setting #164

v2.7.2

06/11/2018

  1. [](#new)
    • Norwegian translation added #163
  2. [](#bugfix)
    • Fixed issue with redirect_after_login being ignored #164
    • CLI commands change-user-state and change-password were ignoring desired username #161

v2.7.1

06/03/2018

  1. [](#bugfix)
    • Removed extra unnecessary username check #159
    • CLI command add-user ignores desired username #157

v2.7.0

05/11/2018

  1. [](#new)
    • Moved support for 2FA authentication into Login plugin (only supported in Admin currently)
    • Updated plugin dependencies (Grav >= 1.4.5, Form >=2.13.4, Email >=2.7.0)
  2. [](#improved)
    • Added cleaner way for 3rd party providers to add twig templates to login form
    • Use Login class validation methods in CLI
    • Added logging of login exceptions
    • Show denied message only when authenticated but not authorized
  3. [](#bugfix)
    • Don't allow Profile saving if a Grav user account doesn't exist (OAuth/LDAP users for example)
    • Don't allow PW reset if no current password exists (OAuth/LDAP users for example)

v2.6.3

04/12/2018

  1. [](#bugfix)
    • Fixed issue with saving profile and stating email has already exists

v2.6.2

04/12/2018

  1. [](#new)
    • Added custom logout redirect configuration option
    • Added support for Login::login() and Login::logout() to return UserLoginEvent instance instead of User
    • Added support for custom login messages and redirects set in UserLoginEvent
  2. [](#bugfix)
    • Fixed typo in activation email body #151

v2.6.1

03/19/2018

  1. [](#improved)
    • Fixed undefined index if login form didn't contain username/password

v2.6.0

02/22/2018

  1. [](#improved)
    • Disabled user registration by default. Enable it manually if you need it.
    • Disabled user-login-on-registration by default. Enable it manually if you need it.
    • Check for existing email addresses when updating User profile.

v2.5.0

12/05/2017

  1. [](#new)
    • Added $grav['login']->login() and $grav['login']->logout() functions with event hooks
    • Added $grav['login']->getRateLimiter($context) function
    • Added events onUserLoginAuthenticate, onUserLoginAuthorize, onUserLoginFailure, onUserLogin, onUserLogout
    • Logout message is now maintained during session destruction
  2. [](#improved)
    • Remember entered username if login fails
    • Improved rate limiter to work without sessions and against distributed attacks
    • Removed partials/messages.html.twig and rely on new core version
    • Moved languages from unified file into dedicated language file structure
    • Welcome / Notice / Activation emails now more flushed out and in HTML like Reset Password
  3. [](#bugfix)
    • Do not send nonce with activation link, email app can open the link in another browser

v2.4.3

10/11/2017

  1. [](#bugfix)
    • Fix an issue when a user only has groups and no access defined #134
    • Escape untrusted URLs in the template files

v2.4.2

09/29/2017

  1. [](#bugfix)
    • Fixed issue with protected page media without access #132
    • Improved validation of email to support RFC5322 Grav#1648

v2.4.1

09/12/2017

  1. [](#bugfix)
    • Fixed an issue with 3rd party login plugins #130

v2.4.0

09/07/2017

  1. [](#new)
    • Added the ability to have a custom route for login page, but not redirect
    • Added a new unauthorized.md page that can be customized as needed
  2. [](#improved)
    • Differentiated between authenticated and authorized
    • Moved rate-limiting logic to the Login class
    • Much code cleanup and removing of cruft
    • Updated vendor libraries
    • Added Russian translation
  3. [](#bugfix)
    • Fixed login JSON response in case of login failure
    • Fixed issue with profile form displaying on login page
    • Store referrer page when trying to access Profile page
    • Fixed error when logging out with an expired session

v2.3.2

06/22/2017

  1. [](#bugfix)
    • Grav plugin cli error on password change #120

v2.3.1

05/16/2017

  1. [](#improved)
    • Added routes to the Admin blueprints

v2.3.0

04/19/2017

  1. [](#new)
    • Added new built-in profile page support
    • Added optional flood protection for password resets and login attempts #91
  2. [](#improved)
    • Use new system configuration entries for username and password format
    • Use initialized form object in Twig templates rather than array from page.header
    • Improved alert styling in login templates
    • Added appends for number field
    • Added missing route options in admin options (blueprints)
  3. [](#bugfix)
    • Set cookie path to / if base_url_relative is empty #102
    • Fixed some redirect logic

v2.2.1

01/24/2017

  1. [](#bugfix)

v2.2.0

12/13/2016

  1. [](#new)
    • RC released as stable

v2.2.0-rc.5

12/07/2016

  1. [](#improved)
    • Added support for hiding Remember me checkbox and and Forgot button (for Offline functionality)
  2. [](#bugfix)
    • Fixed redirect issue in admin plugin

v2.2.0-rc.4

12/04/2016

  1. [](#improved)
    • Improved logic for redirect after login to not include login-related pages.

v2.2.0-rc.3

11/26/2016

  1. [](#improved)
    • Added some validity checks in the reset password form
  2. [](#bugfix)
    • Correctly redirect to the last page visited after login, unless redirect_after_login is defined

v2.2.0-rc.2

11/17/2016

  1. [](#new)
    • Allow to set permissions using nested array syntax #96
  2. [](#improved)
    • Use the same feedback message when resetting the password if the email exists or not. Remove email in the message as we now recover via email, useless
  3. [](#bugfix)
    • Fix registration form, fields were not visible #97
    • Do not initialize the user session if the user exists but has no site.login permission

v2.2.0-rc.1

11/09/2016

  1. [](#new)
    • Allow login via username or email
    • Only allow password recovery via email address

v2.1.2

10/01/2016

  1. [](#bugfix)
    • Fixed an old reference to LoginUtils and replaced with new EmailUtils

v2.1.1

09/08/2016

  1. [](#improved)
    • Use better detection for admin allowing multi-site setup with subfolders

v2.1.0

09/07/2016

  1. [](#improved)
    • Added support for Grav's autoescape twig setting
    • Dropped unused variable reference
    • Moved Email Utils to Email plugin
    • Updated vendor libraries
    • Allow explicitly showing the login page on pages that are not the Login form template #11

v2.0.1

08/10/2016

  1. [](#improved)
    • Added Romanian

v2.0.0

07/14/2016

  1. [](#improved)
    • Optimized nonce creation
    • Point account path to core's account stream #85

v2.0.0-rc.2

06/21/2016

  1. [](#new)
    • Add an option to login protect a login-protected page media accessed through the page route #45
  2. [](#improved)
    • Fixed some language keys
  3. [](#bugfix)
    • Correctly show an error message when the reset password form does not provide the correct nonce

v2.0.0-rc.1

06/01/2016

  1. [](#improved)
    • French updated
  2. [](#bugfix)
    • Enable twig processing in a page #75
    • Deny access to registration when user registration is disabled #72

v2.0.0-beta.3

05/23/2016

  1. [](#improved)
    • Added a redirect after activation
    • Changed hardcoded redirect routes to config-based
  2. [](#bugfix)
    • Fix a redirect issue #74
    • Don't error if missing a HTTP_USER_AGENT browser string

v2.0.0-beta.2

05/03/2016

  1. [](#improved)
    • Improved the login form page once logged in
    • Translate welcome and logout strings
  2. [](#bugfix)
    • Fixed logging out on the homepage
    • Fixed an issue in processing user registration

v2.0.0-beta.1

04/20/2016

  1. [](#new)
    • Introduce a more flexible Login plugin architecture, which allows separate authentication plugins to hook into the Login events. Separated OAuth to its own plugin.
    • OAuth has been separated to its own plugin, needs to be installed separately and configured. The users account filename format has changed too, to fix an issue that involved people with the same name on a service.
    • The redirect option has been changed to redirect_after_login. Make sure you update your configuration file.
  2. [](#improved)
    • Add a proper 'Access levels' config section for Login.
    • Various underlying improvements
    • Updated french, added german
  3. [](#bugfix)
    • Make username field autofocus
    • Add validation to the password reset form
    • Fixed an issue that allowed a user logged in, without access to the actual permissions set to view a page, to see its content, and the login form again even if already logged in.

v1.3.1

02/05/2016

  1. [](#new)
    • Add translations for Username and Password (placeholders are not translated)
  2. [](#improved)
    • Improve registration, forgot, reset and login forms accessibility by setting the id attribute
    • Improved french translation
    • Add the correct message type when raising a form processing error
  3. [](#bugfix)
    • Show the correct error message when the user is not authorized to view a page
    • Fix showing the OAuth links in the login form

v1.3.0

01/06/2016

  1. [](#new)
    • Added a new CLI command to change a user's password
    • Added a new CLI command to edit the user state
  2. [](#improved)
    • Improved french translation

v1.2.1

12/18/2015

  1. [](#new)
    • Croatian translation
  2. [](#improved)
    • Use type email in registration form
    • Drop manual validation in registration

v1.2.0

12/11/2015

  1. [](#new)
    • Added account activation email upon registration
    • Added forgot password functionality
    • Support ACL from parent page
    • Allow login immediately after account activation
  2. [](#improved)
    • Handle admin login page if available
    • Example registration form now provided by plugin
    • Better error handling of registration
    • Tab-based plugin configuration
    • Updated translations
  3. [](#bugfix)
    • Prevent failing when no default values are set

v1.1.0

12/01/2015

  1. [](#new)
    • Support new User Registration
  2. [](#improved)
    • Use new security salt for newer and fallback otherwise
    • Composer update of libraries
    • Check for session existence else throw a runtime error
  3. [](#bugfix)
    • Fix remember-me functionality
    • Check page exists so as not to fail hard
    • Fix for static Inflector references #17

v1.0.1

11/23/2015

  1. [](#improved)
    • Hardening cookies with user-agent and system cache key instead of deprecated system hash
    • Set a custom route for login only if it's not an admin path

v1.0.0

11/21/2015

  1. [](#new)
    • Added OAuth login support for Facebook, Google, GitHub and Twitter
    • Added Nonce form security support
    • Added option to "redirect after login"
    • Added "remember me" functionality
    • Added Hungarian translation
  2. [](#improved)
    • Added blueprints for Grav Admin plugin (multi-language support!)

v0.3.3

09/11/2015

  1. [](#improved)
    • Changed authorise to authorize
  2. [](#bugfix)
    • Fix denied string

v0.3.2

09/01/2015

  1. [](#improved)
    • Broke out login form into its own partial

v0.3.1

08/31/2015

  1. [](#improved)
    • Added username field autofocus

v0.3.0

08/24/2015

  1. [](#new)
    • Added simple CSS styling
    • Added simple login status with logout
  2. [](#improved)
    • Improved README documentation
    • More strings translated
    • Updated blueprints

v0.2.0

08/11/2015

  1. [](#improved)
    • Disable enable in admin

v0.1.0

08/04/2015

  1. [](#new)
    • ChangeLog started...

v1.3.1

02/05/2016

  1. [](#new)
    • Add translations for Username and Password (placeholders are not translated)
  2. [](#improved)
    • Improve registration, forgot, reset and login forms accessibility by setting the id attribute
    • Improved french translation
    • Add the correct message type when raising a form processing error
  3. [](#bugfix)
    • Show the correct error message when the user is not authorized to view a page
    • Fix showing the OAuth links in the login form

v1.3.0

01/06/2016

  1. [](#new)
    • Added a new CLI command to change a user's password
    • Added a new CLI command to edit the user state
  2. [](#improved)
    • Improved french translation

v1.2.1

12/18/2015

  1. [](#new)
    • Croatian translation
  2. [](#improved)
    • Use type email in registration form
    • Drop manual validation in registration

v1.2.0

12/11/2015

  1. [](#new)
    • Added account activation email upon registration
    • Added forgot password functionality
    • Support ACL from parent page
    • Allow login immediately after account activation
  2. [](#improved)
    • Handle admin login page if available
    • Example registration form now provided by plugin
    • Better error handling of registration
    • Tab-based plugin configuration
    • Updated translations
  3. [](#bugfix)
    • Prevent failing when no default values are set

v1.1.0

12/01/2015

  1. [](#new)
    • Support new User Registration
  2. [](#improved)
    • Use new security salt for newer and fallback otherwise
    • Composer update of libraries
    • Check for session existence else throw a runtime error
  3. [](#bugfix)
    • Fix remember-me functionality
    • Check page exists so as not to fail hard
    • Fix for static Inflector references #17

v1.0.1

11/23/2015

  1. [](#improved)
    • Hardening cookies with user-agent and system cache key instead of deprecated system hash
    • Set a custom route for login only if it's not an admin path

v1.0.0

11/21/2015

  1. [](#new)
    • Added OAuth login support for Facebook, Google, GitHub and Twitter
    • Added Nonce form security support
    • Added option to "redirect after login"
    • Added "remember me" functionality
    • Added Hungarian translation
  2. [](#improved)
    • Added blueprints for Grav Admin plugin (multi-language support!)

v0.3.3

09/11/2015

  1. [](#improved)
    • Changed authorise to authorize
  2. [](#bugfix)
    • Fix denied string

v0.3.2

09/01/2015

  1. [](#improved)
    • Broke out login form into its own partial

v0.3.1

08/31/2015

  1. [](#improved)
    • Added username field autofocus

v0.3.0

08/24/2015

  1. [](#new)
    • Added simple CSS styling
    • Added simple login status with logout
  2. [](#improved)
    • Improved README documentation
    • More strings translated
    • Updated blueprints

v0.2.0

08/11/2015

  1. [](#improved)
    • Disable enable in admin

v0.1.0

08/04/2015

  1. [](#new)
    • ChangeLog started...