irdc 4b76bc5b32 Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data ...

* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>

2022-09-17 17:23:41 -07:00

..

AccessMap.php

PHPdoc cleanup

2016-03-04 21:11:12 -05:00

AuthenticationManager.php

Authorize only API tokens when 2FA is enabled

2019-02-01 15:40:35 -08:00

AuthenticationProviderInterface.php

Rewrite of the authentication and authorization system

2015-12-05 20:31:27 -05:00

Authorization.php

Rewrite of the authentication and authorization system

2015-12-05 20:31:27 -05:00

OAuthAuthenticationProviderInterface.php

PHPdoc cleanup

2016-03-04 21:11:12 -05:00

PasswordAuthenticationProviderInterface.php

PHPdoc cleanup

2016-03-04 21:11:12 -05:00

PostAuthenticationProviderInterface.php

Render QR code for TwoFactor authentication without Google Chart API

2017-03-09 21:24:04 -05:00

PreAuthenticationProviderInterface.php

PHPdoc cleanup

2016-03-04 21:11:12 -05:00

Role.php

Custom project roles inherit from project members

2016-09-08 20:44:03 -04:00

SessionCheckProviderInterface.php

Rewrite of the authentication and authorization system

2015-12-05 20:31:27 -05:00

Token.php

Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

2022-09-17 17:23:41 -07:00