aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/User/Session.php
Commit message (Expand)AuthorAgeFilesLines
...
* Save the scope of an auth token in the sessionRobin Appelman2017-04-051-18/+27
* Add postLogout hook to finish sessions from external session managers (#27048)Felix Rupp2017-03-191-0/+3
* Merge pull request #2606 from temparus/masterblizzz2017-02-151-3/+6
|\
| * Update license headerSandro Lutz2017-02-071-0/+2
| * Merge remote-tracking branch 'nextcloud/master'Sandro Lutz2017-02-071-3/+4
| |\
| * | Add check if UserManager is of type PublicEmitter before calling preLogin hookSandro Lutz2017-02-011-1/+3
| * | Change where preLogin hook gets calledSandro Lutz2017-02-011-3/+2
* | | Save the used token id in the session so it can be used later onJoas Schilling2017-02-091-2/+20
| |/ |/|
* | add action to existing brute force protectionBjoern Schiessle2017-01-181-3/+3
* | Make sure the loginname is set when logging in via cookieJoas Schilling2017-01-051-0/+1
|/
* Set last-login-check on basic authRoeland Jago Douma2016-12-051-0/+5
* do not remember session tokens by defaultChristoph Wurst2016-11-271-1/+1
* fix warning with token loginRobin Appelman2016-11-161-1/+1
* read lockdown scope from tokenRobin Appelman2016-11-161-2/+1
* basic lockdown logicRobin Appelman2016-11-161-0/+2
* Introduce an event for first time login based on the last login time stampThomas Müller2016-11-141-6/+19
* inject ISecureRandom into user session and use injected config tooChristoph Wurst2016-11-021-11/+18
* bring back remember-meChristoph Wurst2016-11-021-19/+51
* Fix logClientIn for non-existing users (#26292)Vincent Petry2016-10-251-0/+3
* dont update the auth token twiceRobin Appelman2016-10-111-2/+0
* dont get bruteforce delay twiceRobin Appelman2016-08-291-2/+1
* missing PHPDocJörn Friedrich Dreyer2016-08-141-0/+1
* Type compatabilityJörn Friedrich Dreyer2016-08-141-1/+1
* Unreachable statementJörn Friedrich Dreyer2016-08-141-4/+1
* Update with robinJoas Schilling2016-07-211-1/+1
* Fix othersJoas Schilling2016-07-211-1/+2
* Mitigate race conditionLukas Reschke2016-07-201-1/+4
* Implement brute force protectionLukas Reschke2016-07-201-5/+18
* Login hooks (#25260)Christoph Wurst2016-06-271-40/+61
* check login name when authenticating with client tokenChristoph Wurst2016-06-241-2/+11
* Merge pull request #25172 from owncloud/token-login-validationVincent Petry2016-06-221-67/+108
|\
| * fix unit test warning/errorsChristoph Wurst2016-06-201-11/+9
| * fix nitpickChristoph Wurst2016-06-201-2/+3
| * dont create a session token for clients, validate the app password insteadChristoph Wurst2016-06-171-8/+24
| * store last check timestamp in token instead of sessionChristoph Wurst2016-06-171-52/+92
| * use token last_activity instead of session valueChristoph Wurst2016-06-171-16/+2
* | update session token password on user password changeChristoph Wurst2016-06-211-0/+17
* | add PasswordLoginForbiddenExceptionChristoph Wurst2016-06-171-17/+20
|/
* create session token only for clients that support cookiesChristoph Wurst2016-06-131-2/+11
* create session token on all APIsChristoph Wurst2016-06-131-2/+7
* Merge pull request #25000 from owncloud/fix-email-login-davVincent Petry2016-06-091-3/+14
|\
| * Allow login by email address via webdav as well - fixes #24791Thomas Müller2016-06-091-3/+14
* | catch sessionnotavailable exception if memory session is usedChristoph Wurst2016-06-081-5/+10
* | When creating a session token, make sure it's the login password and not a de...Christoph Wurst2016-06-081-5/+28
|/
* Create session tokens for apache auth usersChristoph Wurst2016-05-311-4/+14
* Update license headersLukas Reschke2016-05-261-5/+2
* add default token auth config on install, upgrade and add it to sample configChristoph Wurst2016-05-241-0/+3
* do not allow client password logins if token auth is enforced or 2FA is enabledChristoph Wurst2016-05-241-5/+65
* when generating browser/device token, save the login name for later password ...Christoph Wurst2016-05-241-3/+4
* login explicitlyChristoph Wurst2016-05-241-9/+6