Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
70 commits
Select commit Hold shift + click to select a range
56b2dc4
Split Auth class to support multiple providers
Sep 2, 2017
eb62329
ACL Support
May 5, 2018
9b07b97
Add OAuth2 client support
May 5, 2018
fbe68df
Release 0.2
May 5, 2018
fb4eeb8
Add credentials table
Feb 17, 2019
776aa36
Cleanup, fix tests
Feb 17, 2019
2f2a75d
Include mysql_testcase only once
Feb 17, 2019
a1d728b
Use require_once for Mysql_TestCase
Feb 17, 2019
bc5d00e
updates
Apr 7, 2019
6efcc47
OAuthController: Support https behind proxy
May 19, 2019
5b652c2
fixup OAuthController header name
May 19, 2019
72c1a5c
fix: return proper Forbidden code
GuilhermeBarile Apr 19, 2025
46f5ffc
fix: allow unauthenticated users to see /index
GuilhermeBarile Apr 19, 2025
24a7cc7
fixes
GuilhermeBarile May 17, 2025
4c218e8
feat: Add RequireRole Middleware
GuilhermeBarile Sep 29, 2025
0afed19
feat: replace AclTrait with RequireRole Attribute
GuilhermeBarile Oct 12, 2025
b735d5d
fix: use array
GuilhermeBarile Oct 12, 2025
2945179
Use DI to instantiate RequireRole
GuilhermeBarile Dec 21, 2025
ad5c296
Update Middleware syntax
GuilhermeBarile Dec 22, 2025
fa60536
Use RequireScope Middleware for consistency
GuilhermeBarile Dec 29, 2025
a8fabd4
fix: Test auth before fetching the user in user_can
GuilhermeBarile Jan 3, 2026
acfad6e
Update dependencies
GuilhermeBarile Feb 25, 2026
be2c8cd
Security Improvements
GuilhermeBarile Feb 25, 2026
9a2d425
Replace MysqlAuth with DBAuth
GuilhermeBarile Feb 25, 2026
a2fb09c
Replace travis with github action
GuilhermeBarile Feb 25, 2026
470edff
Security improvements
GuilhermeBarile Feb 25, 2026
146cba6
Add user_roles support
GuilhermeBarile Feb 25, 2026
54635e2
Replace `with` functionality with `relations`
GuilhermeBarile Feb 25, 2026
00de2fb
Fix Middleware types
GuilhermeBarile Mar 3, 2026
1d9438f
Add login_providers support, add credentials list to user
GuilhermeBarile Mar 4, 2026
f1af342
Rework Scope/Roles
GuilhermeBarile Mar 15, 2026
a6dac1f
fix: last login/roles hydration
GuilhermeBarile Mar 15, 2026
e520385
feat: get_users_by_role
GuilhermeBarile Mar 15, 2026
8e920d3
Add get_roles
GuilhermeBarile Mar 23, 2026
e87b626
Add reusable user management API
GuilhermeBarile Jul 25, 2026
37f41f1
Keep new credentials marked as never logged in
GuilhermeBarile Jul 25, 2026
224dfc4
Honor database prefix when resetting passwords
GuilhermeBarile Jul 28, 2026
10c68bd
Lock objectiveweb/db to 0.8.x
objectivebot Sep 27, 2026
4ba276f
Harden OAuth session establishment
objectivebot Sep 27, 2026
b635632
Harden OAuth session establishment
objectivebot Sep 27, 2026
88921e2
Test OAuth session security
objectivebot Sep 27, 2026
7b4c91b
Align 0.2.0 DBAuth documentation
objectivebot Sep 27, 2026
0531420
Add Phinx CI configuration
objectivebot Sep 27, 2026
74c277f
Strengthen 0.2.0 release CI
objectivebot Sep 27, 2026
573f1e8
Centralize public user sanitization
objectivebot Sep 28, 2026
65462ba
Sanitize DBAuth public user results
objectivebot Sep 28, 2026
ae1e4b5
Use canonical user sanitization in BasicAuth
objectivebot Sep 28, 2026
7294c03
Test public user secret sanitization
objectivebot Sep 28, 2026
95fc5f2
Scope eager relations to subject user
objectivebot Sep 28, 2026
e384322
Test eager relation subject isolation
objectivebot Sep 28, 2026
34f859d
Include lifecycle state in role user queries
objectivebot Sep 28, 2026
d5fb61c
Test final active admin lifecycle guard
objectivebot Sep 28, 2026
9c0539c
Align auth migration with DBAuth defaults
objectivebot Sep 28, 2026
9abd7e7
Verify migrated auth schema
objectivebot Sep 28, 2026
6741afb
Verify DBAuth migration schema in CI
objectivebot Sep 28, 2026
2db85c4
Align controller test schema with auth defaults
objectivebot Sep 28, 2026
2063e6b
Make role user lookup database portable
objectivebot Sep 28, 2026
907724e
Keep role lookup results public-safe
objectivebot Sep 28, 2026
5e9bea7
Test role lookup on PostgreSQL
objectivebot Sep 28, 2026
a2225dd
Exercise role lookup on PostgreSQL
objectivebot Sep 28, 2026
457a77b
Align BasicAuth provider semantics
objectivebot Sep 28, 2026
1d85eb3
Test BasicAuth provider parity
objectivebot Sep 28, 2026
0ec48cb
Tighten user management input validation
objectivebot Sep 28, 2026
9ef9221
Test user management input validation
objectivebot Sep 28, 2026
80f643b
Harden and test OAuth callback flow
objectivebot Sep 28, 2026
c82fe47
Keep OAuth redirect flow void-safe
objectivebot Sep 28, 2026
9519b91
Add OAuth provider test fixture
objectivebot Sep 28, 2026
204615b
Expand OAuth callback and linking tests
objectivebot Sep 28, 2026
cb46432
Document explicit OAuth redirect URI
objectivebot Sep 28, 2026
da445cc
Consume OAuth state safely
objectivebot Sep 28, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
83 changes: 83 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,83 @@
name: CI

on:
push:
pull_request:

jobs:
test:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
php-version: ["8.2", "8.3", "8.4", "8.5"]

steps:
- name: Checkout
uses: actions/checkout@v4

- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: ${{ matrix.php-version }}
coverage: none

- name: Validate Composer metadata
run: composer validate --strict

- name: Install dependencies
run: composer install --no-interaction --prefer-dist

- name: Run tests
run: vendor/bin/phpunit test

migrations-postgresql:
runs-on: ubuntu-latest

services:
postgres:
image: postgres:16
env:
POSTGRES_DB: auth_test
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
ports:
- 5432:5432
options: >-
--health-cmd pg_isready
--health-interval 10s
--health-timeout 5s
--health-retries 5

env:
PGHOST: 127.0.0.1
PGPORT: 5432
PGDATABASE: auth_test
PGUSER: postgres
PGPASSWORD: postgres

steps:
- name: Checkout
uses: actions/checkout@v4

- name: Setup PHP
uses: shivammathur/setup-php@v2
with:
php-version: "8.5"
extensions: pdo_pgsql
coverage: none

- name: Install dependencies
run: composer install --no-interaction --prefer-dist

- name: Run bundled Phinx migrations
run: vendor/bin/phinx migrate --configuration test/phinx.php --environment testing

- name: Verify migration status
run: vendor/bin/phinx status --configuration test/phinx.php --environment testing

- name: Verify migrated schema
run: php test/verify_migrations.php

- name: Verify portable role lookup
run: php test/verify_postgresql_role_lookup.php
19 changes: 0 additions & 19 deletions .travis.yml

This file was deleted.

Loading
Loading