summaryrefslogtreecommitdiffstats
path: root/lib/private/Authentication
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #25172 from owncloud/token-login-validationVincent Petry2016-06-225-29/+66
|\ | | | | Token login validation
| * store last check timestamp in token instead of sessionChristoph Wurst2016-06-175-24/+58
| |
| * use token last_activity instead of session valueChristoph Wurst2016-06-172-5/+8
| |
* | update session token password on user password changeChristoph Wurst2016-06-212-0/+27
| |
* | Merge pull request #25162 from owncloud/password-login-forbidden-hintVincent Petry2016-06-201-0/+29
|\ \ | | | | | | Password login forbidden hint
| * | add PasswordLoginForbiddenExceptionChristoph Wurst2016-06-171-0/+29
| |/
* / close cursor after loading a tokenChristoph Wurst2016-06-171-0/+1
|/
* load 2FA provider apps before querying classesChristoph Wurst2016-06-161-0/+13
|
* fail hard if 2fa provider can not be loaded (#25061)Christoph Wurst2016-06-131-1/+3
|
* do not generate device token if 2FA is enable for userChristoph Wurst2016-06-071-0/+1
|
* Create session tokens for apache auth usersChristoph Wurst2016-05-314-5/+43
|
* Update license headersLukas Reschke2016-05-2611-11/+0
|
* when generating browser/device token, save the login name for later password ↵Christoph Wurst2016-05-245-6/+32
| | | | checks
* Merge pull request #24559 from owncloud/2faVincent Petry2016-05-234-0/+253
|\ | | | | two factor auth
| * add OCC command to enable/disable 2FA for a userChristoph Wurst2016-05-231-2/+27
| |
| * Add two factor auth to coreChristoph Wurst2016-05-234-0/+228
| |
* | add button to invalidate browser sessions/device tokensChristoph Wurst2016-05-235-6/+37
| |
* | add button to add new device tokensChristoph Wurst2016-05-232-1/+4
| |
* | list user's auth tokens on the personal settings pageChristoph Wurst2016-05-231-1/+11
|/
* add method to query all user auth tokensChristoph Wurst2016-05-183-0/+54
|
* a single token provider sufficesChristoph Wurst2016-05-184-10/+62
|
* don't spam the log file with failed token validation entriesChristoph Wurst2016-05-131-3/+1
|
* delete the token in case an exception is thrown when decrypting the passwordChristoph Wurst2016-05-111-1/+8
|
* use the query builder instead of raw sql statementsChristoph Wurst2016-05-111-18/+27
|
* fix PHPDoc and other minor issuesChristoph Wurst2016-05-114-6/+11
|
* PHPDoc and other minor fixesChristoph Wurst2016-05-112-6/+26
|
* Add token auth for OCS APIsChristoph Wurst2016-05-114-4/+26
|
* Add index on 'last_activity'Christoph Wurst2016-05-114-3/+15
| | | | | | add token type column and delete only temporary tokens in the background job debounce token updates; fix wrong class import
* Check if session token is valid and log user out if the check failsChristoph Wurst2016-05-113-14/+66
| | | | | * Update last_activity timestamp of the session token * Check user backend credentials once in 5 minutes
* invalidate (delete) session token on logoutChristoph Wurst2016-05-114-3/+109
| | | | add 'last_activity' column to session tokens and delete old ones via a background job
* token based authChristoph Wurst2016-05-116-0/+292
* Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token