Rewrite of the authentication and authorization system

app/Core/Session/SessionManager.php

@@ -13,6 +13,13 @@ use Kanboard\Core\Http\Request;
  */
 class SessionManager extends Base
 {
+    /**
+     * Event names
+     *
+     * @var string
+     */
+    const EVENT_DESTROY = 'session.destroy';
+
     /**
      * Return true if the session is open
      *
@@ -41,7 +48,7 @@ class SessionManager extends Base
         session_name('KB_SID');
         session_start();
 
-        $this->container['sessionStorage']->setStorage($_SESSION);
+        $this->sessionStorage->setStorage($_SESSION);
     }
 
     /**
@@ -51,6 +58,8 @@ class SessionManager extends Base
      */
     public function close()
     {
+        $this->dispatcher->dispatch(self::EVENT_DESTROY);
+
         // Destroy the session cookie
         $params = session_get_cookie_params();
 
@@ -80,7 +89,7 @@ class SessionManager extends Base
             SESSION_DURATION,
             $this->helper->url->dir() ?: '/',
             null,
-            Request::isHTTPS(),
+            $this->request->isHTTPS(),
             true
         );
 

app/Core/Session/SessionStorage.php

@@ -12,12 +12,13 @@ namespace Kanboard\Core\Session;
  * @property array  $user
  * @property array  $flash
  * @property array  $csrf
- * @property array  $postAuth
+ * @property array  $postAuthenticationValidated
  * @property array  $filters
  * @property string $redirectAfterLogin
  * @property string $captcha
  * @property string $commentSorting
  * @property bool   $hasSubtaskInProgress
+ * @property bool   $hasRememberMe
  * @property bool   $boardCollapsed
  */
 class SessionStorage