Lines of Code
[root]/Classes/Security/Exception
| Author | Changes | Lines of Code | Lines per Change |
|---|---|---|---|
| Totals | 255 (100.0%) | 2018 (100.0%) | 7.9 |
| robert | 37 (14.5%) | 835 (41.4%) | 22.5 |
| andi | 21 (8.2%) | 765 (37.9%) | 36.4 |
| k-fish | 194 (76.1%) | 316 (15.7%) | 1.6 |
| sebastian | 3 (1.2%) | 102 (5.1%) | 34.0 |
Removed everything in trunk after move to git.
0 lines of code changed in 57 files:
[-TASK] FLOW3: Removed @version keyword from files, resolves #8835.
0 lines of code changed in 23 files:
* [+TASK] FLOW3 (Object): Added session scope related methods to the object manager and interface.
* [+FEATURE] FLOW3 (AOP): Added a matches operator as a new possibility for runtime evaluations.
* [+FEATURE] FLOW3 (AOP): Global objects available in runtime evaluations can now be configured in the settings. Resolves #6598.
* [+FEATURE] FLOW3 (Security): Implemented query rewriting according to the security policy. Relates to #5659, Resolves #6604.
35 lines of code changed in 1 file:
[+FEATURE] FLOW3 (Core): The flow3 hell script now uses the PHP binary specified in the PHP environment variable, resolves #6681.
[~TASK] FLOW3: Some SVN property maintenance.
4 lines of code changed in 4 files:
[+FEATURE] FLOW3 (Security): Implemented runtime evaluations support for policy resources. Resolves #6599, relates to #5659
[~TASK] FLOW3 (Security): Removed the old privileges concept. Now there is only one (implicit) access privilege. Resolves #6600, relates to #5659
36 lines of code changed in 1 file:
[~TASK] FLOW3 (Documentation): Updated the Coding Guidelines: removed inconsistent exceptions from the general class naming rules. Also added the rule that names of aspect classes must end with "Aspect". Relates to #5658
[~TASK] Global: Renamed many classes and interfaces in order to be consistent with FLOW3's naming rules. A migration script to update third-party applications will follow soon. Resolves #5658
739 lines of code changed in 21 files:
[~TASK] FLOW3: Made all exceptions part of the public API, so they get documented properly.
21 lines of code changed in 21 files:
[!!!][+FEATURE] FLOW3 (Security): Added a HMAC generator and checker to prevent unauthorized access on objects where no edit fields were generated for. It is mandatory in case objects are modified on the server side. See the issue for a more in-depth explanation. This feature does NOT break backwards-compatibility as long as you use only Fluid for form-generation. In case of custom fields, it WILL break backwards compatibility, and you might need the @dontverifyrequesthash annotation. Resolves #4960.
[+FEATURE] Fluid (ViewHelpers): Added a request hash to all form fields. It is mandatory in case objects are modified on the server side. Relates to #4960.
102 lines of code changed in 3 files:
[+TASK] FLOW3: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Fluid: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Kickstart: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHP6: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHPUnit: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Testing: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Welcome: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] YAML: Removed file level docblocks and @package/@subpackage annotations.
0 lines of code changed in 18 files:
[!!!][~TASK] FLOW3: Renamed the directory "Public" to "Web" and the constant FLOW3_PATH_PUBLIC to FLOW3_PATH_WEB accordingly.
[!!!][~TASK] FLOW3: Renamed the folder for packages which are included in the FLOW3 distribution from "Distribution" to "Framework".
[~TASK] FLOW3: Improved and refactored the bootstrap script (index.php)
8 lines of code changed in 4 files:
Added svn:keywords where missing...
12 lines of code changed in 10 files:
FLOW3(Security):
* The ProviderManager now throws exceptions if the configuration is incorrect.
43 lines of code changed in 1 file:
FLOW3 (Security):
* made parallel authentication mechanisms possible. Now you can login to typo3 with a different mechanism than to flow3
* credentials are no longer stored in the session.
* the RSA keys are now stored in a cache with a TTL of 30.
* reinjectDependencies is now used when authentication tokens are retrieved from the session.
* Exception/Handler is not needed.
* the authentication tokens hold an authentication status now. Look at the TokenInterface for possible values.
* added a getTokensOfType() method to the security context.
* authentication entry points work now.
* Adjusted the security configuration in FLOW3.yaml (you have to enable security to test the new features)
* Access is now denied if no policy entry is found.
TYPO3 (Backend):
* renamed the property $viewObjectName to $defaultViewObjectName, according to latest changes.
126 lines of code changed in 3 files:
FLOW3 (Security): Implemented the RSA based Login-Controller. You can call it under: http://yourhost/flow3/login
126 lines of code changed in 3 files:
!!! Globally renamed all class files to the new shorter version. Resolves #2524
FLOW3: (Resource) Adapted the class loader and other related parts of FLOW3 to the new class filename convention
FLOW3: Moved the FLOW3 bootstrap into the F3\FLOW3 namepace
88 lines of code changed in 12 files:
FLOW3:
* fixed license name in @license annotation, fixes #2454
12 lines of code changed in 12 files:
FLOW3:
* changed license to LGPL v3 or later
168 lines of code changed in 12 files:
!!! 5.3.0alpha3 namespaces refactoring:
* changed namespace delimiter from :: to \
* all class references in namespaced code prepended by \
PHPUnit:
* adapted mock object handling to the new namespaces syntax
FLOW3:
* PropertyReflection now uses setAccessible() instead of array cast to access protected properties
PHPCR:
* added a missing interface already used for type hints
43 lines of code changed in 12 files:
FLOW3:
* getContext() in ContextHolder no longer creates a context if none is found but throws an exception instead
35 lines of code changed in 1 file:
The biggest part of the security framework ist finished now:
FLOW3 (Security):
* Implemented the central security aspect
* Refactored the authentication manager
* Implemented the policy enforcement interceptor
* Implemented the access decision voter manager
36 lines of code changed in 1 file:
* FLOW3 (AOP): removed the cunstructor from the joinpoint interface, to be able to mock it.
* FLOW3 (Security): Implemented the policy expression parser and policy service
* FLOW3 (Security): Some pending changes in the authorization subpackage, more to follow soon
70 lines of code changed in 2 files:
Set svn:keywords property to Id on all PHP files.
0 lines of code changed in 8 files:
!!! Major change, will break existing code.
Part 3 - Packages
FLOW3, most other packages:
* added namespaces to the code of FLOW3 and all packages in the current TYPO3v5 distribution.
PHPUnit:
* some changes to make PHPUnit (more) namespace-compatible.
Some notes:
* Documentation updates will follow
* you might need to change your class names when adapting namespaces to avoid using "Class", "Empty", "Default", ...
* expect FLOW3CGL and/or PHPCodeSniffer to be broken (I'll have a look)
* some parts might still be broken, especially in edge-cases where the global namespace needs to explicitly used
18 lines of code changed in 8 files:
FLOW3:
* fixed a bunch of CGL violations
* some TODO comments converted into @todo annotations
3 lines of code changed in 8 files:
Implemented the first part of the security framework.
* FLOW3 (Security): Implemented the session security context holder
* FLOW3 (Security): Implemented the security context that provides the current context based on request patterns and the configured authentication strategy
* FLOW3 (Security): Implemented a basic filter firewall that can be configured in the FLOW3 configuration file
* FLOW3 (Security): Implemented a basic security interceptor, that triggers the authentication process and can be placed in the firewall
* FLOW3 (Security): Implemented the authentication (provider) manager and a very basic username/password provider with its token
* FLOW3 (MVC): Changed some tests to use mock objects (firewall and security context holder)
* FLOW3 (Validation): Fixed a bug in the alphanumeric validator
176 lines of code changed in 5 files:
* FLOW3 (Security): Added the classes and method stubs for the rest of the ACL subpackage
* FLOW3 (Security): Some smaller changes in the rest of the security subpackage
82 lines of code changed in 3 files:
This is the first commit of the new security framework. BEWARE: This is all work in progress, the classes only reflect the structure and have at most empty method stubs with some documentation! More to follow up soon.
35 lines of code changed in 1 file: