Skip to content

CakePHP Authentication 1.2.0

Choose a tag to compare

View all tags
@markstory markstory released this 21 Sep 15:26
1.2.0
4884c2b
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Deprecations

  • Setting the unauthenticatedRedirect, queryParam and identityAttribute options on AuthenticationMiddleware is deprecated. These options should now be set on the service.

New Features

  • The unauthenticatedRedirect, and queryParam options can now be configured on the AuthenticationService. This makes it easier to use Router to generate the redirect URL.

Other Changes

To fix a potential session fixation problem in the SessionAuthenticator without impacting SecurityComponent identity information is now persisted to the session after the controller action is complete. If your application accesses the currently logged in identity through the session directly you will get information from the previous request. You should consider updating your code to use $request->getAttribute('identity') instead.

Assets 2
Loading