Skip to content

Releases: AppsDevTeam/doctrine-authenticator

v2.6.2: Enhances session management and adds dynamic expiration support

29 Mar 12:51

Choose a tag to compare

Introduces a callback for dynamic session expiration based on user identity and adds functionality to list active sessions, terminate specific sessions, and retrieve the current session ID. It also refactors token authentication to ensure the identity is loaded before calculating session expiration.

v2.6.1: Updates clearIdentity to support optional and string identifiers

28 Mar 10:30

Choose a tag to compare

Allows the clearIdentity method to be called without arguments, which is now utilized during the logout process. It also expands the accepted identifier types to include strings and handles null values.

v2.6.0: Adds protection against brute-force login attempts

27 Mar 09:28

Choose a tag to compare

Introduces a mechanism to track failed login attempts by IP address and block authentication when a configurable limit is reached within a specified timeframe. This includes a new LoginAttempt entity and a TooManyLoginAttemptsException.

v2.5.4: Makes IP address optional for onetime tokens

09 Mar 10:47

Choose a tag to compare

Allows the IP address field to be null in the database and handles cases where $_SERVER['REMOTE_ADDR'] is unavailable, such as when executing from the command line.

v2.5.3: Refactors OTP authentication process.

22 Feb 03:32

Choose a tag to compare

Refactors the OTP authentication flow to improve security and streamline the user experience.
It injects EntityManagerInterface instead of the concrete implementation,
marks onetime token as used upon successful login, and updates SecurityUser.

v2.5.2: Refactors OTP authentication process.

22 Feb 03:16

Choose a tag to compare

Refactors the OTP authentication flow to improve security and streamline the user experience.
It injects EntityManagerInterface instead of the concrete implementation,
marks onetime token as used upon successful login, and updates SecurityUser.

v2.4.6: Improves exception messages on authentication

13 Feb 10:09

Choose a tag to compare

Improves exception messages in the onetime token authenticator to provide more context for debugging authentication failures.
This makes it easier to identify the cause of authentication issues by including the username, token ID, or identifier in the exception message.

v2.4.5: Handles null identity during authentication

12 Feb 05:54

Choose a tag to compare

Prevents errors when a user identity cannot be found during the authentication process.

Returns null if the identity cannot be found within the repository,
allowing for proper handling of non-existent users.

v2.4.4: Refactors OTP authentication process.

08 Feb 15:52

Choose a tag to compare

Refactors the OTP authentication by:
- Converts traits to concrete classes.
- Removes unnecessary interfaces and query objects.
- Simplifies the onetime token creation and validation.
- Uses DoctrineAuthenticator as base class
- Improves code structure and maintainability.

v2.4.3: Refactors onetime token handling in authentication

08 Feb 10:14

Choose a tag to compare

Simplifies the onetime token authentication flow by ensuring the token is available throughout the process, improving code readability and maintainability.

This ensures the identity is correctly associated with the onetime token.