Skip to content

Latest commit

 

History

History
121 lines (84 loc) · 4.48 KB

_changes.md

File metadata and controls

121 lines (84 loc) · 4.48 KB

Highlighted Changes in Version

Unreleased

No changes yet

1.2.0

Released July 13, 2022

Enhancements:

  • Added alternate authorization Models with stronger typing

1.1.0

Released July 13, 2022

Enhancements:

  • Updated development tools to the CodeIgniter DevKit
  • Added Config\Auth::$landingRoute variable to set landing page (route name) after user success to login
  • Added Config\Auth::$reservedRoutes variable to set named routes
  • Added a check for custom validation rules during registration via $registrationRules property in app/Config/Validation.php
  • Reworked all filters, added BaseFilter. Login, permission and role filters now extends BaseFilter
  • Added new php spark auth:list_users command to list all registered users
  • Added validation rules for email in attemptForgot() method of AuthController
  • Updated language and doc files to reflect latest changes

Bugs Fixed:

  • Fixed a bug in Auth trait's restrictWithPermissions() method preventing to check multiple permissions at once
  • Fixed a namespace error in published views with auth:publish command
  • Fixed issue with forcePasswordReset() method of user entity preventing PostgreSQL support
  • Fixed a bug with views when your project folder is not root folder
  • Fixed improper redirection issue to '/' when site is served from sub-directory
  • Fixed argument type error in Password::verify() method
  • Fixed argument type error in AuthenticationBase class login() method
  • Fixed type error in LocalAuthenticator when result from user model is not instance of User entity
  • Fixed a bug in login filter causing redirect loop

These are just highlights. Visit the CHANGELOG for more details.

1.0.1

Released July 2, 2021

Enhancements:

  • Added Infection for mutation testing (test quality testing)
  • Added RoaveBC to detect breaking changes
  • Added Tachycardia for slow test detection and annotation
  • Added Coveralls to track and record test coverage
  • Switched code style enforcement to PHP CS Fixer to match the framework (awaiting configuration)
  • Added FlatAuthorization::usersInGroup()

Bugs Fixed:

  • Fixed a typo causing user activation to fail
  • Enforced user field validation to prevent false password validation failures
  • Fixed a bug preventing empty cache stores

1.0 final

Released June 9, 2021

Breaking Changes:

  • Config\Auth::$requireActivation should now be null instead of false
  • Config\Auth::$activeResetter should now be null instead of false
  • UserModel now requires username to be 30 characters or less (to match the database restriction)

Enhancements:

  • All password-related features have been moved to a new class, Myth\Auth\Password, and can be accessed statically.
  • New Slovak translation
  • New German translation
  • New Indonesian translation
  • New Dutch translation
  • New CLI command: auth:activate_user
  • New CLI command: auth:hash_password
  • New CLI command: auth:set_password
  • new Fakers for Groups, Permissions, and Users for use during testing
  • AuthController now has a _render method you can override if you use a different view renderer, like Twig
  • new method: GroupModel::getGroupsForUser

Bugs Fixed:

  • fixed improper redirect issue where it was using base_url instead of site_url
  • permissions cache is now deleted when the groups cached is deleted
  • Login filter now ignores the activate account link

1.0-beta 3

Released May 11, 2020

Security Fixes:

The biggest fix this time around was by michalsn that restricts the fields passed during registration to only those defined in Config\Auth::$validFields and $personalFields, as well as password. This stops someone from passing in active=1 in your form and bypassing activation. If you cannot update Myth:Auth due to core CodeIgniter version requirements, then please adjust your published AuthController as shown here.

Enhancements:

  • User entity now has getRoles() method
  • can re-send activation emails manually now.
  • Filters have been added to the list of items that can be published
  • new Russian translation
  • new Brazilian Portuguese translation
  • new Italian translation
  • adjusted username validation to include some punctuation

Bugs Fixed:

  • Can no longer create multiple groups of the same name.
  • Fixed an issue with remember-me cookies not being sent with redirects (requires latest develop branch of CI4)

These are just highlights. See the full changelog for more details.