Directory Tests/Security/Authorization/

Lines of Code

Developers

Most Recent Commits

k-fish 2010-08-24 10:42 Rev.: 5057

Removed everything in trunk after move to git.

0 lines of code changed in 8 files:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (del), F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (del), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (del), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (del), F3_FLOW3_Security_Authorization_RequestFilterTest.php (del), FilterFirewallTest.php (del), InterceptorResolverTest.php (del), RequestFilterTest.php (del)

andi 2009-07-29 20:03 Rev.: 2934

* [+FEATURE] FLOW3 (Security): Extended the authorization and acl system to be able to decide on resources, not only on join points.
* [+FEATURE] FLOW3 (Security): Implemented a very basic authentication controller.

112 lines of code changed in 1 file:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (+112 -20)

k-fish 2009-07-16 15:02 Rev.: 2813

[+TASK] FLOW3: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Fluid: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Kickstart: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHP6: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] PHPUnit: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Testing: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] Welcome: Removed file level docblocks and @package/@subpackage annotations.
[+TASK] YAML: Removed file level docblocks and @package/@subpackage annotations.

0 lines of code changed in 4 files:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (-8), FilterFirewallTest.php (-8), InterceptorResolverTest.php (-8), RequestFilterTest.php (-8)

robert 2009-07-15 15:32 Rev.: 2800

[!!!][~TASK] FLOW3: Renamed the directory "Public" to "Web" and the constant FLOW3_PATH_PUBLIC to FLOW3_PATH_WEB accordingly.
[!!!][~TASK] FLOW3: Renamed the folder for packages which are included in the FLOW3 distribution from "Distribution" to "Framework".
[~TASK] FLOW3: Improved and refactored the bootstrap script (index.php)

2 lines of code changed in 1 file:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (+2 -2)

k-fish 2009-06-02 11:35 Rev.: 2523

Added svn:keywords where missing...

0 lines of code changed in 1 file:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (changed)

robert 2009-05-04 14:25 Rev.: 2189

* FLOW3: (MVC) Introduced a RequestInterface and a ResponseInterface and made sure those are used everywhere where the Request class was used before.
* FLOW3: (Documentation) Continued writing documentation for the MVC framework.

5 lines of code changed in 1 file:

• Tests/Security/Authorization: RequestFilterTest.php (+5 -5)

andi 2009-03-23 17:36 Rev.: 2025

FLOW3(Security):
* Refactored almost all unit tests. Now the TestPackage is not needed anymore for the security tests.
* Cleaned up the interfaces, as some method aren't needed anymore with the new tests.

Testing:
* fixed a bug in the BaseTestcase, that sometimes crashed class loading.

133 lines of code changed in 3 files:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (+38 -28), FilterFirewallTest.php (+69 -41), InterceptorResolverTest.php (+26 -12)

andi 2009-03-18 15:39 Rev.: 2013

FLOW3(Security):
* The login controller regenerates RSA keys, if they timed out. No exception anymore.
* The whole security package uses injectSettings() to load configuration settings now.
* Added the possibility to set openSSL options for the RSAWalletServicePHP in the FLOW3.yaml

24 lines of code changed in 2 files:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (+16 -20), FilterFirewallTest.php (+8 -12)

andi 2009-03-17 16:25 Rev.: 2004

FLOW3 (Security):
* made parallel authentication mechanisms possible. Now you can login to typo3 with a different mechanism than to flow3
* credentials are no longer stored in the session.
* the RSA keys are now stored in a cache with a TTL of 30.
* reinjectDependencies is now used when authentication tokens are retrieved from the session.
* Exception/Handler is not needed.
* the authentication tokens hold an authentication status now. Look at the TokenInterface for possible values.
* added a getTokensOfType() method to the security context.
* authentication entry points work now.
* Adjusted the security configuration in FLOW3.yaml (you have to enable security to test the new features)
* Access is now denied if no policy entry is found.
TYPO3 (Backend):
* renamed the property $viewObjectName to $defaultViewObjectName, according to latest changes.

3 lines of code changed in 1 file:

• Tests/Security/Authorization: FilterFirewallTest.php (+3 -3)

robert 2009-02-09 17:08 Rev.: 1886

* FLOW3: (MVC) (Security) Replaced "Classname" by "ClassName" where it appeared.
* FLOW3: (Security) Replaced $uuid by $UUID where it appeared.
* FLOW3: (Security) Renamed tokenClassName to tokenObjectName because it's essentially that.
* FLOW3: (Security) Removed the call-by-refs in RSAWalletService because they were causing E_STRICT warnings.

1 lines of code changed in 1 file:

• Tests/Security/Authorization: InterceptorResolverTest.php (+1 -1)

robert 2009-01-28 13:04 Rev.: 1811

!!! Globally renamed all class files to the new shorter version. Resolves #2524
FLOW3: (Resource) Adapted the class loader and other related parts of FLOW3 to the new class filename convention
FLOW3: Moved the FLOW3 bootstrap into the F3\FLOW3 namepace

97 lines of code changed in 4 files:

• Tests/Security/Authorization: AccessDecisionVoterManagerTest.php (new 32), FilterFirewallTest.php (new 45), InterceptorResolverTest.php (new 12), RequestFilterTest.php (new 8)

k-fish 2009-01-15 16:06 Rev.: 1749

FLOW3:
* fixed license name in @license annotation, fixes #2454

4 lines of code changed in 4 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+1 -1), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+1 -1), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (+1 -1), F3_FLOW3_Security_Authorization_RequestFilterTest.php (+1 -1)

k-fish 2009-01-07 11:37 Rev.: 1707

FLOW3:
* changed license to LGPL v3 or later

56 lines of code changed in 4 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+14 -7), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+14 -7), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (+14 -7), F3_FLOW3_Security_Authorization_RequestFilterTest.php (+14 -7)

k-fish 2008-12-10 15:39 Rev.: 1599

!!! 5.3.0alpha3 namespaces refactoring:
* changed namespace delimiter from :: to \
* all class references in namespaced code prepended by \

PHPUnit:
* adapted mock object handling to the new namespaces syntax

FLOW3:
* PropertyReflection now uses setAccessible() instead of array cast to access protected properties

PHPCR:
* added a missing interface already used for type hints

82 lines of code changed in 4 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+25 -25), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+24 -33), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (+9 -9), F3_FLOW3_Security_Authorization_RequestFilterTest.php (+24 -24)

robert 2008-11-11 12:16 Rev.: 1481

* FLOW3: (Component) Renamed "component" to "object" - everywhere. That means we now have an Object Manager instead of a Component Manager, an Object Factory etc. Resolves #2119

Globally adjusted all code for the above change.

12 lines of code changed in 3 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+4 -4), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+3 -3), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (+5 -5)

robert 2008-11-10 12:28 Rev.: 1460

* Fixed FLOW3's yaml configuration: exceptional errors were defined as plain strings instead of constants resulting in even (catchable) fatal errors being ignored
* Fixed several tests which still used the object configuration instead of arrays

22 lines of code changed in 2 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+12 -12), F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+10 -9)

robert 2008-11-03 19:23 Rev.: 1422

* FLOW3: (Component) Renamed the method Component::Factory->getComponent() to Component::Factory->create(). Resolves #1846
* FLOW3: (Component) Component::Factory->create() will now throw an exception on trying to create a component of scope != prototype
* FLOW3: (Component) The Component::Manager->getComponent() method can still be used as a last resort to retrieve components of any scope. However dependency injection for singletons and the component factory for prototype should always be the first choice!

Refactored all packages of the TYPO3 distribution to match the above changes.

Note: The test "F3::TYPO3CR::NodeTest::setPropertySetsValue" currently fails on my machine with the following message:

Error in setPropertySetsValue with data set #34 Detail
TYPO3CR/Classes/F3_TYPO3CR_Node.php:577
Unable to convert value of type string to Name: Namespace prefix is invalid

5 lines of code changed in 1 file:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+5 -5)

andi 2008-09-24 18:43 Rev.: 1282

The biggest part of the security framework ist finished now:

FLOW3 (Security):
* Implemented the central security aspect
* Refactored the authentication manager
* Implemented the policy enforcement interceptor
* Implemented the access decision voter manager

67 lines of code changed in 1 file:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (+67 -15)

andi 2008-09-23 15:21 Rev.: 1277

* FLOW3 (AOP): removed the cunstructor from the joinpoint interface, to be able to mock it.
* FLOW3 (Security): Implemented the policy expression parser and policy service
* FLOW3 (Security): Some pending changes in the authorization subpackage, more to follow soon

64 lines of code changed in 1 file:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_AccessDecisionVoterManagerTest.php (new 64)

k-fish 2008-09-19 19:27 Rev.: 1264

Set svn:keywords property to Id on all PHP files.

0 lines of code changed in 3 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_FilterFirewallTest.php (changed), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (changed), F3_FLOW3_Security_Authorization_RequestFilterTest.php (changed)

k-fish 2008-09-12 16:07 Rev.: 1210

!!! Major change, will break existing code.

Part 3 - Packages

FLOW3, most other packages:
* added namespaces to the code of FLOW3 and all packages in the current TYPO3v5 distribution.

PHPUnit:
* some changes to make PHPUnit (more) namespace-compatible.

Some notes:
* Documentation updates will follow
* you might need to change your class names when adapting namespaces to avoid using "Class", "Empty", "Default", ...
* expect FLOW3CGL and/or PHPCodeSniffer to be broken (I'll have a look)
* some parts might still be broken, especially in edge-cases where the global namespace needs to explicitly used

56 lines of code changed in 3 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+25 -24), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (+9 -8), F3_FLOW3_Security_Authorization_RequestFilterTest.php (+22 -21)

robert 2008-07-30 14:05 Rev.: 1062

* Global Configuration: Moved the default routes configuration to within the FLOW3 package
* FLOW3: (Configuration) Refactored the configuration manager. Now there's a dedicated method getSettings() for retrieving settings for a certain package. You will most likely want to use this method instead of the now called "getSpecialConfiguration()" method.
* FLOW3: (Configuration) Converted the configuration source into a non-static class.
* FLOW3: (Configuration) Implemented proper tests for the Configuration Manager
* TYPO3CR and TYPO3: Adapted the code to use the new configuration manager methods
* FLOW3: The special "FLOW3 configuration" (as defined in FLOW3.php) technically are now just settings for the package "FLOW3" with the only difference that they are loaded earlier than other settings and can only be set in the FLOW3 package and the global configuration.
* FLOW3: (MVC) Refactored the Routing mechanism - mainly cosmetic changes. Among other things removed the Route Interface.
* FLOW3: (MVC) Refactored the Web Request Builder a bit.
* FLOW3: (Security) Fixed the Context Holder Session destructor which was throwing uncatched exceptions while trying to close an uninitalized session. Needs further cleanup / handling.

12 lines of code changed in 1 file:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_FilterFirewallTest.php (+12 -12)

andi 2008-07-29 16:25 Rev.: 1061

Implemented the first part of the security framework.

* FLOW3 (Security): Implemented the session security context holder
* FLOW3 (Security): Implemented the security context that provides the current context based on request patterns and the configured authentication strategy
* FLOW3 (Security): Implemented a basic filter firewall that can be configured in the FLOW3 configuration file
* FLOW3 (Security): Implemented a basic security interceptor, that triggers the authentication process and can be placed in the firewall
* FLOW3 (Security): Implemented the authentication (provider) manager and a very basic username/password provider with its token
* FLOW3 (MVC): Changed some tests to use mock objects (firewall and security context holder)
* FLOW3 (Validation): Fixed a bug in the alphanumeric validator

322 lines of code changed in 3 files:

• Tests/Security/Authorization: F3_FLOW3_Security_Authorization_FilterFirewallTest.php (new 131), F3_FLOW3_Security_Authorization_InterceptorResolverTest.php (new 70), F3_FLOW3_Security_Authorization_RequestFilterTest.php (new 121)