- Drop composer dependency on doctrine/annotations - not used by warden since warden-core:2.0
- Support PHP 8.3
- Support warden-core v2 which allows us to drop warden-validator-symfony
- Update min requirements of kohana-extras to provide a symfony validator factory which explicitly enables a doctrine annotation reader. Additionally require min versions of warden-core and warden-validator-symfony that are compatible with symfony validator > v5 to use the Assert/Email mode=strict option.
- Drop support for PHP 8.1
- Support kohana-extras v3
- Support symfony mailer v7
- Replace Swiftmailer with symfony/mailer
- Support PHP 8.2
- Drop support for PHP 8.0
- Update 1.4 series with fixes from 1.3.1 (update dependencies / drop direct dependency on symfony/validator and egulias/email-validator)
- Require warden-validator-symfony ^1.2.1 to be compatible with warden/core ^1.2.1 to avoid using depreciated checkMX option
- Support PHP 8.1
-
Bump minimum supported swiftmailer to 6.3.0 and mark a conflict with egulias/email-validator before 3.0 (swiftmailer claims to support the 2.x series but in fact this is broken).
-
Remove direct dependency on symfony/validator and (dev) egulias/email-validator - these are already required in by dependencies e.g. ingenerator/warden-validator-symfony and so we don't actually need to directly require them. These dependencies were causing conflicts when ingenerator/warden-validator-symfony wanted to pull in a new symfony/validator release as a non-breaking change.
- Support php8.0
- Support php7.4
- Add LogMetadataProvider to include logged-in user email in app and request logs
- Now requires kohana-extras:2.x for enhanced logging support
- Ensure support for php7.2
- Drop support for php5
- Support kohana-extras 0.4 release (merge-up of 0.3.4 release)
- [Feature] Support global and per-account rate limiting of login attempts. Customise the warden.login.global and warden.login.user bucket_types in config/warden.php to set site-specific limits.
- [Feature] Pre-validate registration and password reset links and show the user an error immediately rather than on save if the link they're using has expired.
- [Feature] Handle cases where a user's email fails MX validation at time of login and a password reset / activation therefore cannot be sent.
- [Feature] Provide
LastLoginTrackingUser
interface to identify entities that have a property(/ies) that should be updated every time the user logs in - for example last login time. Apply this to your entity to have KohanaUserSession update and persist the user on every login. - [Feature] Handle
inactive account
response on login and add controller etc to handle users clicking through on activation links. - [Feature] Add controller etc for authenticated user to change their own password.
- [BREAKING] Add optional controller endpoints for triggering and completing change to a
verified new user email address. If you don't want to expose this, set route_controller to
FALSE for the
change-email
andcomplete-change-email
actions in config/warden.php - [Feature] Handle and log rate-limited email verification attempts for login and registration
- [BREAKING] Update dependency definitions for rate-limiting in warden-core
- [BREAKING] Update user repository and notification mailer interfaces in line with warden-core 0.3.
- Support kohana-extras 0.4 release
- Log all failed logins
- Extract all flash message texts to message file rather than hardcoding
- Add support for PHP ^7.2
- Login form provides submission URL in action param to enable the form to be embedded on different pages
- Implement a flexible config-based UrlProvider that is both able to generate URLs for the most common cases Warden needs them, and to define the application routing to map those back to controllers.
- Provide WardenKohanaDependencyFactory::definitions and ::controllerDefinitions
- Now officially requires ingenerator/tokenista as the default token-generating service
- Split all actions to individual controllers - these will now need to be routed as HTTPMethodRoutes for each one, and reverse routing may well need to change
- Require the inGenerator fork of Kohana
- Regenerate session ID on login / logout
- Bump kohana-extras dependency to 0.2
- First version, extracted from host project