Releases: nette/security
Releases · nette/security
Released version 3.2.3
A small maintenance release headlined by a fix to session-based identity storage, plus a tightening of the project's static analysis setup and a round of phpDoc polish.
- SessionStorage no longer refreshes the sliding expiration timestamp once the session has already expired – an expired identity stays expired instead of being silently kept alive for another round
- Adopted
nette/phpstan-rulesand made static analysis a mandatory part of the build, then resolved the errors it surfaced - Improved phpDoc types and descriptions across the codebase
Released version 3.2.2
- support for PHP 8.5
- optimized global function calls
Released version 3.2.1
Released version 3.2.0
- requires PHP 8.1
- uses PHP 8.1 features
- removed deprecated IUserStorage (BC break)
Released version 3.1.8
- support for PHP 8.3
- constants are PascalCase
- used #[\SensitiveParameter] to mark sensitive parameters
Released version 3.1.7
- composer: allows nette/utils 4.0
Released version 3.1.6
- CookieStorage: getState returns the previously set ID #67
- CookieStorage: fixed SameSite attribute
SessionStorage::setExpiration()does not overwrite data in the session- SimpleAuthenticator: refactoring, added
verifyPassword() - strict type fix
- coding style
Released version 3.1.5
- SessionStorage: used new sessionSection API to not start the session unless needed
Released version 3.1.4
- support for PHP 8.1
User::setExpiration()second argument accept also bool $clearIdentity- User: added consts LOGOUT_MANUAL & LOGOUT_INACTIVITY
- fixed compatibility with Symfony DebugClassLoader
- compatibility: improved code hinting