Skip to content

Releases: cakephp/authentication

CakePHP Authentication 2.6.2

25 Nov 18:05
9dc2d73
Compare
Choose a tag to compare

What's Changed

Security Improvements

  • Overwrite "algorithms" config of JWT authenticator instead of merging. by @ADmad in #501

New Contributors

Full Changelog: 2.6.1...2.6.2

CakePHP Authentication 2.6.1

23 Apr 14:36
e4c17b4
Compare
Choose a tag to compare

Fixes

  • Improved documentation.
  • Cleaned up extra parameters passed in tests.
  • Improved the loginUrl mismatch error message.
  • Fixed a regression where identity instances that already implement IdentityInterface were being wrapped in a decorator when it wasn't necessary.

CakePHP Authentication 2.6.0

12 Feb 07:56
6f6988c
Compare
Choose a tag to compare

Fixes

  • Update AuthenticationRequiredException to extend HttpException so that proper status code is set. #437

Enhancements

  • Allow customizing identity attribute in IdentityHelper. #436

CakePHP Authentication 2.5.0

05 Jan 07:24
c8dc3a1
Compare
Choose a tag to compare

Fixes

  • Updated exception base classes to extend HttpException so that status codes continue to work.

CakePHP Authentication 2.4.0

29 Dec 23:46
Compare
Choose a tag to compare

Changes

  • Use Cookie::create() to create cookies. This enables the usage of the samesite attribute.
  • The httpOnly option of CookieAuthenticator is deprecated. Use httponly instead.
  • The expire option of CookieAuthenticator is deprecated. Use expires instead.
  • Added Japanese documentation.
  • Removed unreachable code.

CakePHP Authentication 2.3.1

14 Nov 18:54
0d7b273
Compare
Choose a tag to compare

Fixes

  • Improve documentation for CallbackIdentifier.
  • Add example to docs with multiple authenticators.
  • Added initial japanese translation to the docs.
  • Moved CI to GitHub Actions.

CakePHP Authentication 2.3.0

17 May 02:27
0ee1b43
Compare
Choose a tag to compare

Added

  • Improved documentation for JwtAuthenticator.
  • Added subjectKey option to JwtAuthenticator. This new option allows you to define the claim/subject key used in your JWT tokens. This option defaults to the previously hardcoded value of sub

CakePHP Authentication 2.2.0

09 May 18:58
Compare
Choose a tag to compare

Fixes

  • Improved documentation fixing incorrect signatures and broken links.
  • Fixed a notice error in AuthenticationService::getUnauthenticatedRedirectUrl()

Added

  • CallbackIdentifier objects can now return Result objects to return error messages.

CakePHP Authentication 2.1.0

08 Mar 02:30
6dba415
Compare
Choose a tag to compare

Added

  • LegacyPasswordHasher now supports unsalted hashes if you need to interoperate with older systems.

CakePHP Authentication 2.0.5

11 Feb 15:06
c0798ff
Compare
Choose a tag to compare

Changes

  • Documentation improvements.
  • Fixed type errors in TokenAuthenticator when requests contained neither the query parameter or header.