Skip to content
GitLab
Switch branch/tag
This project is mirrored from https://git.typo3.org/typo3/typo3.git. Pull mirroring failed .
Repository mirroring has been paused due to too many failed attempts. It can be resumed by a project maintainer.
Last successful update .
  1. 14 Mar, 2021 1 commit
  3. 22 Dec, 2020 1 commit
  5. 10 Dec, 2020 1 commit
    • Benni Mack's avatar
      [!!!][FEATURE] Refactored Session Handling · 733353c1
      Benni Mack authored 
      The AbstractUserAuthentication class handles way too much
of what it should know / do.

For this reason, a new UserSession object which contains
basic information needed for everything belonging to a non-fixated
session, a fixated anonymous session, if a session was evelated,
or if a session has expired, is kept in there.
The "SessionManager" should not be used anymore publically
but slowly dissolve into a SessionBackendManager.

Design goals:
* UserAuth object should not know about session backends
* UserAuth should not store sessionData etc. directly in its own object
* Decouple UserSession info from any properties of UserAuth
* A UserSessionManager deals with the creation and validation of the UserSession objects. No Session Objects can be created etc outside
of this class to maintain persistability
* UserSessionManager also encapsulates ipLocking and the responsible SessionBackend

Final goals to be tackled later:
* Build a user session object from the request object, and not within the UserAuth object
* Session Handling can be accessed outside of UserAuth
* Cookie Handling and Session Handling are separated from UserAuth
* Load Session information from PSR-7 request instead of $_COOKIE

Resolves: #93023
Releases: master
Change-Id: Ia2d8244e433d0f6adf220d443b2c0947f251b5e9
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/66935

Tested-by: default avatarTYPO3com <noreply@typo3.com>
Tested-by: Oliver Bartsch's avatarOliver Bartsch <bo@cedev.de>
Tested-by: Christian Kuhn's avatarChristian Kuhn <lolli@schwarzbu.ch>
Tested-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
Reviewed-by: Oliver Bartsch's avatarOliver Bartsch <bo@cedev.de>
Reviewed-by: Christian Kuhn's avatarChristian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
      733353c1
  7. 15 Apr, 2020 1 commit
  9. 14 Apr, 2020 1 commit
  11. 13 Apr, 2020 1 commit
  13. 28 Mar, 2020 1 commit
  15. 02 Mar, 2020 1 commit
  17. 07 Jul, 2018 1 commit
  19. 14 Jun, 2018 1 commit
    • Benni Mack's avatar
      [FEATURE] Enable SQLite in installation process · 0b00b424
      Benni Mack authored and Susanne Moog's avatar Susanne Moog committed 
      The patch adds SQLite as new DBMS platform to the TYPO3
instance installer if pdo_sqlite is available.

* sqlite has no database name and user / password restriction
  but stores the database in a single file.

* the filename contains a random string so it can't be easily
  guessed if the config directory is within web document root
  and the web server is configured to deliver .sqlite files.

* the feature .rst file mentions possible security risks comes
  with having a database within document root and documents
  how to prevent those.

* similar to mysql and postgres, an acceptance test verifies
  the system can be successfully installed using a blank
  installation and using the introduction package.

* bamboo plan spec is adapted to execute the sqlite installer suite

* testing-framework is raised to 3.8.1 supporting the ac test:
  composer update typo3/testing-framework

Resolves: #85256
Releases: master
Change-Id: I91a8c98f868b5e29bee4ad7dedd3cc8c50346452
Reviewed-on: https://review.typo3.org/55563

Reviewed-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
Tested-by: Benni Mack's avatarBenni Mack <benni@typo3.org>
Tested-by: default avatarTYPO3com <no-reply@typo3.com>
Reviewed-by: Susanne Moog's avatarSusanne Moog <susanne.moog@typo3.org>
Tested-by: Susanne Moog's avatarSusanne Moog <susanne.moog@typo3.org>
      0b00b424
  21. 27 Apr, 2018 1 commit
  23. 17 Feb, 2018 1 commit
  25. 10 Feb, 2018 1 commit
  27. 27 Nov, 2017 1 commit
  29. 20 Sep, 2017 1 commit
  31. 23 Jun, 2017 1 commit
  33. 22 May, 2017 1 commit