Directory Classes/Security/Cryptography/

Lines of Code

Developers

Most Recent Commits

k-fish 2010-08-24 10:42 Rev.: 5057

Removed everything in trunk after move to git.

0 lines of code changed in 7 files:

• Classes/Security/Cryptography: HashService.php (del), OpenSSLRSAKey.php (del), OpenSslRsaKey.php (del), RSAWalletServiceInterface.php (del), RSAWalletServicePHP.php (del), RsaWalletServiceInterface.php (del), RsaWalletServicePhp.php (del)

k-fish 2010-08-13 16:21 Rev.: 4969

[-TASK] FLOW3: Removed @version keyword from files, resolves #8835.

0 lines of code changed in 4 files:

• Classes/Security/Cryptography: HashService.php (-1), OpenSslRsaKey.php (-1), RsaWalletServiceInterface.php (-1), RsaWalletServicePhp.php (-1)

k-fish 2010-06-23 16:03 Rev.: 4616

[+FEATURE] FLOW3 (Security): Implemented request to "Create encryption hash if none was defined", resolves #7516, resolves #7517.

8 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+8 -4)

robert 2010-03-29 16:09 Rev.: 4021

[COMMITFIX] FLOW3 (Security): Ooops, some old code slipped in during my last commit.

1 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+1 -1)

robert 2010-03-29 16:02 Rev.: 4020

[+FEATURE][+API] FLOW3 (Security): Created two new functions for the HashService: createSaltedMd5() and validateSaltedMd5(). Resolves #7054

31 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+31 -1)

k-fish 2010-03-04 11:06 Rev.: 3903

[+FEATURE] FLOW3 (Core): The flow3 hell script now uses the PHP binary specified in the PHP environment variable, resolves #6681.
[~TASK] FLOW3: Some SVN property maintenance.

1 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+1 -1)

k-fish 2010-02-23 23:08 Rev.: 3847

[~TASK] FLOW3: Some cleanup to code documentation.

3 lines of code changed in 1 file:

• Classes/Security/Cryptography: RsaWalletServicePhp.php (+3 -3)

robert 2010-02-22 16:17 Rev.: 3837

[+FEATURE] FLOW3 (Object): Implemented a static object container which is automatically built. It's essentially a hardcoded version of the autowired and configured object dependencies - just a lot faster. Many tests are still missing, but the version in this commit should be mostly functional. Addresses #3740 and resolves #2123.
[!!!][~API] FLOW3 (Object): Heavily refactored the Object Manager and its tests. The most important change is the removal of the Object Factory whose create() method is now located in the Object Manager. Furthermore, the getObject() method has been renamed to get() and a few minor important API functions within the Object Manager have been modified. This commit also contains a script which allows for semi automatically migrating existing code to the new API (see ./flow3 migrate objectmanagerusage). Resolves #6562
[~TASK] FLOW3 (Configuration): The Configuration Manager and its YAML source now doesn't depend on the YAML package anymore but refers to a YAML parser class within the FLOW3 package. Resolves #6564.

7 lines of code changed in 1 file:

• Classes/Security/Cryptography: RsaWalletServicePhp.php (+7 -7)

robert 2010-01-15 15:49 Rev.: 3644

[~TASK] Global: Commit of those files whose case of the filename changed. Relates to #5658

3 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSslRsaKey.php (+1 -1), RsaWalletServiceInterface.php (+1 -1), RsaWalletServicePhp.php (+1 -1)

robert 2010-01-15 15:38 Rev.: 3643

[~TASK] FLOW3 (Documentation): Updated the Coding Guidelines: removed inconsistent exceptions from the general class naming rules. Also added the rule that names of aspect classes must end with "Aspect". Relates to #5658
[~TASK] Global: Renamed many classes and interfaces in order to be consistent with FLOW3's naming rules. A migration script to update third-party applications will follow soon. Resolves #5658

454 lines of code changed in 4 files:

• Classes/Security/Cryptography: HashService.php (+3 -3), OpenSslRsaKey.php (new 77), RsaWalletServiceInterface.php (new 96), RsaWalletServicePhp.php (new 278)

robert 2010-01-13 13:50 Rev.: 3606

[+FEATURE] FLOW3 (MVC): If the result of an action method is an object providing a __toString() method, this method will be called by the ActionController and its result will be added to the response content. Resolves #5995
[+FEATURE] FLOW3 (MVC): The routes property @controller now allows the use of namespace separators for referring to classes in file / class structure below "Controllers". Resolves #5998
[~TASK] FLOW3 (Documentation): Fixed a few typos in the AOP documentation.

1 lines of code changed in 2 files:

• Classes/Security/Cryptography: HashService.php (-2), OpenSSLRSAKey.php (+1 -1)

robert 2009-11-26 14:50 Rev.: 3511

[~TASK] FLOW3 (Security): Changed the case of the recently introduce configuration option for the hash service's encryption key: it's now hashService: encryptionKey instead of HashService: encryptionKey.

2 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+2 -2)

k-fish 2009-11-24 21:43 Rev.: 3500

[+BUGFIX] FLOW3 (AOP): The built proxy classes now retain vital method annotations, fixes #5484
[~TASK] FLOW3 (Security): Some tweaks to the HashService, renamed generateHash() to generateHmac(), validateHash() to validateHmac()
[!!!][+CONFIGURATION] FLOW3 (Security): the HashService now needs an encryptionKey to be set in it's settings
[~TASK] FLOW3 (MVC): Tweaked ActionController::checkRequestHash() a little

25 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+25 -8)

sebastian 2009-10-13 08:17 Rev.: 3316

[+BUGFIX] FLOW3 (Security): Fixed two issues with Request Hashing. Changed hash implementation from normal SHA1 to a real HMAC. Thanks to Markus Krause for pointing this out. Relates to #4960.

3 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (+3 -2)

sebastian 2009-10-09 13:59 Rev.: 3309

[!!!][+FEATURE] FLOW3 (Security): Added a HMAC generator and checker to prevent unauthorized access on objects where no edit fields were generated for. It is mandatory in case objects are modified on the server side. See the issue for a more in-depth explanation. This feature does NOT break backwards-compatibility as long as you use only Fluid for form-generation. In case of custom fields, it WILL break backwards compatibility, and you might need the @dontverifyrequesthash annotation. Resolves #4960.
[+FEATURE] Fluid (ViewHelpers): Added a request hash to all form fields. It is mandatory in case objects are modified on the server side. Relates to #4960.

63 lines of code changed in 1 file:

• Classes/Security/Cryptography: HashService.php (new 63)

k-fish 2009-10-06 15:23 Rev.: 3294

[~BUGFIX] FLOW3 (Security): Added an exception if SSL private key generation fails, relates to #4870.

4 lines of code changed in 1 file:

• Classes/Security/Cryptography: RSAWalletServicePHP.php (+4)

k-fish 2009-07-16 15:02 Rev.: 2813

[+TASK] FLOW3: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Fluid: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Kickstart: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHP6: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHPUnit: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Testing: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Welcome: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] YAML: Removed file level docblocks and @package/@subpackage annotations.

0 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSSLRSAKey.php (-8), RSAWalletServiceInterface.php (-8), RSAWalletServicePHP.php (-8)

k-fish 2009-07-15 12:28 Rev.: 2794

[TASK] FLOW3: moved from @internal to @api, resolves #3883

4 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSSLRSAKey.php (+2 -5), RSAWalletServiceInterface.php (+2 -8), RSAWalletServicePHP.php (-14)

andi 2009-06-19 14:23 Rev.: 2629

* [~CONF]: FLOW(Security): Cleaned up the authentication provider configuration syntax
* [TASK]: FLOW(Security): Fixed a doc comment in the RSAWalletService
* [FIX]: FLOW(Security): The encrypted password is not written to the visible input fields of the login form anymore.

3 lines of code changed in 1 file:

• Classes/Security/Cryptography: RSAWalletServicePHP.php (+3 -3)

k-fish 2009-06-02 11:35 Rev.: 2523

Added svn:keywords where missing...

0 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSSLRSAKey.php (changed), RSAWalletServiceInterface.php (changed), RSAWalletServicePHP.php (changed)

robert 2009-05-20 19:14 Rev.: 2293

* FLOW3: Marked all methods as @internal except those which are considered part of the official API. Resolves #1280
* TYPO3CR: Fixed two tests of the Storage\PDO\Search testcase.

23 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSSLRSAKey.php (+3), RSAWalletServiceInterface.php (+6), RSAWalletServicePHP.php (+14)

andi 2009-03-18 15:39 Rev.: 2013

FLOW3(Security):
* The login controller regenerates RSA keys, if they timed out. No exception anymore.
* The whole security package uses injectSettings() to load configuration settings now.
* Added the possibility to set openSSL options for the RSAWalletServicePHP in the FLOW3.yaml

15 lines of code changed in 1 file:

• Classes/Security/Cryptography: RSAWalletServicePHP.php (+15)

andi 2009-03-17 16:25 Rev.: 2004

FLOW3 (Security):
* made parallel authentication mechanisms possible. Now you can login to typo3 with a different mechanism than to flow3
* credentials are no longer stored in the session.
* the RSA keys are now stored in a cache with a TTL of 30.
* reinjectDependencies is now used when authentication tokens are retrieved from the session.
* Exception/Handler is not needed.
* the authentication tokens hold an authentication status now. Look at the TokenInterface for possible values.
* added a getTokensOfType() method to the security context.
* authentication entry points work now.
* Adjusted the security configuration in FLOW3.yaml (you have to enable security to test the new features)
* Access is now denied if no policy entry is found.
TYPO3 (Backend):
* renamed the property $viewObjectName to $defaultViewObjectName, according to latest changes.

37 lines of code changed in 1 file:

• Classes/Security/Cryptography: RSAWalletServicePHP.php (+37 -65)

robert 2009-02-09 17:08 Rev.: 1886

* FLOW3: (MVC) (Security) Replaced "Classname" by "ClassName" where it appeared.
* FLOW3: (Security) Replaced $uuid by $UUID where it appeared.
* FLOW3: (Security) Renamed tokenClassName to tokenObjectName because it's essentially that.
* FLOW3: (Security) Removed the call-by-refs in RSAWalletService because they were causing E_STRICT warnings.

32 lines of code changed in 2 files:

• Classes/Security/Cryptography: RSAWalletServiceInterface.php (+10 -10), RSAWalletServicePHP.php (+22 -22)

andi 2009-02-08 21:03 Rev.: 1882

FLOW3 (Security): Implemented the RSA based Login-Controller. You can call it under: http://yourhost/flow3/login

484 lines of code changed in 3 files:

• Classes/Security/Cryptography: OpenSSLRSAKey.php (new 85), RSAWalletServiceInterface.php (new 104), RSAWalletServicePHP.php (new 295)