cd27effc02
use https protocol for qricket
2024-04-26 18:46:14 +02:00
2ef7b8e2c6
simplify installation instructions based on Will's comment
2024-04-26 18:45:08 +02:00
8007233058
remove mention of default external provider
2024-04-25 21:31:38 +02:00
22d45f2ab4
fix documentation link
2024-04-25 21:28:48 +02:00
2080319f6f
make QR Code Provider a mandatory constructor argument
...
This change is discussed in #104
Currently, the library defaults to a QR Code Provider using an external
service, thus leaking secrets.
This change forces the definition of a QR Code Provider in the
constructor. It is a breaking change.
fixes #104
2024-04-25 21:23:39 +02:00
cabcf5d493
Merge pull request #124 from RobThree/bacon-has-multiple-versions-now
...
Bacon has multiple versions now
2024-04-19 12:26:01 +01:00
8477141a36
🔧 bump to remove deprecation warnings
2024-04-19 11:40:57 +01:00
028867dec2
🚨 bacon has multiple versions now
2024-04-19 11:29:56 +01:00
dfc1124f96
Merge pull request #117 from Mattie112/patch-1
...
Changed default secret length from 80bits to 160bits as recommended by RFC4226
2024-04-17 20:46:47 +02:00
d4a5026d86
Revert back to the intended 160 bits
2024-04-17 20:43:49 +02:00
bb6802c093
Merge branch 'master' into patch-1
2024-04-17 20:36:16 +02:00
b909cb38f6
Merge pull request #119 from NicolasCARPi/nico-sensitive-attr
...
Add SensitiveParameter to sensitive arguments
2024-04-17 20:28:42 +02:00
e08b0a5445
Merge branch 'master' into nico-sensitive-attr
...
* master:
add CI4-auth link in README. fix #107 (#123 )
remove insecure rng providers and remove polyfill for hash_equals (#122 )
delete files specific to code editors (#120 )
Exclude useless files from dist archive #103
2024-04-16 18:21:01 +02:00
ecef270ba7
add CI4-auth link in README. fix #107 ( #123 )
2024-04-16 17:16:48 +01:00
194ecc28eb
remove insecure rng providers and remove polyfill for hash_equals ( #122 )
...
* remove insecure rng providers
and remove the openssl provider. We now rely exclusively on
random_bytes(), as there are no reasons not to. Fix #121
* remove the isSecure property of the test rng class
* remove pointless test rng class
we were testing a test class, which didn't make a lot of sense.
* Revert "remove pointless test rng class"
This reverts commit f6da6bee6d06220d4a54
2024-04-16 16:52:51 +01:00
323053bd52
delete files specific to code editors ( #120 )
...
* delete files specific to code editors
* remove TwoFactorAuth.phpproj
* remove TwoFactorAuth.sln
They are not used anymore. See https://github.com/RobThree/TwoFactorAuth/pull/119#issuecomment-2057777036
* remove deleted files from excluded files in composer.json
2024-04-16 14:44:25 +01:00
83c7449270
use a link in CHANGELOG.md for SensitiveParameter
2024-04-15 22:43:29 +02:00
086a3758ec
Exclude useless files from dist archive #103
...
Co-authored-by: Cédric Anne <cedric.anne@gmail.com >
2024-04-15 21:23:58 +01:00
bba4c207c2
use global import
2024-04-15 21:43:53 +02:00
061a2a39b4
don't include the sensitive param change in breaking changes section
...
in changelog
2024-04-15 21:42:23 +02:00
76f420e6b2
add SensitiveParameter to sensitive arguments
...
This change adds the PHP attribute SensitiveParameter to the secret
holding variables.
See: https://www.php.net/manual/en/class.sensitiveparameter
This feature is only available in PHP 8.2, so the minimum php version
required has been updated.
Github Actions now use PHP 8.2 and 8.3 for the tests.
The checkout action has been updated to v4, too.
Fix issue #118
2024-04-15 21:40:19 +02:00
319a58a001
Update IRNGProviderTest.php
2024-03-04 16:16:31 +01:00
d996779182
Changed default secret bits from 80 to 160 as recommended by RFC4226
...
https://www.ietf.org/rfc/rfc4226.txt
(and TOTP refers to RFC4226, see https://www.ietf.org/rfc/rfc6238.txt )
2023-11-17 13:53:13 +01:00
ab93dd41ce
Merge pull request #115 from Mattie112/endroidqr-v5
...
Fix issue #114 (Support for EndroidQR v5)
2023-11-14 12:50:27 +00:00
ec35073c06
🔧 test all endroid versions we can care about
2023-11-14 12:49:15 +00:00
13a56018f4
Fixed typo
2023-11-10 13:43:28 +01:00
4b6b0601b7
Fixed check ordering
2023-11-10 13:41:25 +01:00
126afe4c25
Removed dependency again from composer
2023-11-10 13:32:44 +01:00
63f6259db2
Added support for EndroidQR v5
2023-11-10 13:27:45 +01:00
137df4dd3c
🔧 remove deprecated rule https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/7066
2023-07-29 15:46:20 +01:00
9476751d6b
Merge pull request #110 from modelrailroader/patch-1
...
Fix docs: Construct new TwoFactorAuth-class
2023-07-29 15:36:31 +01:00
0565d63e6a
fix: better understanding for QrCodeProvider class
2023-06-23 21:21:37 +02:00
d5aa22a96f
fix: hyperlinks for new file extensions
2023-06-23 17:56:25 +02:00
a6f7735b9f
fix: docs for new PHP Version
2023-06-23 17:54:58 +02:00
6416e79c3e
fix: fixed typing
2023-06-11 12:22:26 +02:00
83611592db
fix: fixed documentation
2023-06-11 12:20:59 +02:00
dd0ecaeed1
Fix: Changes for > PHP 8
2023-06-08 16:56:08 +02:00
241dfec585
fix: fixed docs
2023-06-05 16:09:42 +02:00
63b49ce25c
Merge pull request #108 from xHeaven/master
...
code improvements, readability enhancements, type safety, modern syntax adaptation
2023-06-04 01:03:17 +02:00
e554a9b5e4
change all $qrtext to camelCase version
2023-05-28 19:47:10 +02:00
9bc454f425
use null coalescing assignment instead of just null coalescing
2023-05-28 18:58:39 +02:00
c2183e16b3
use property promotion for options
2023-05-28 18:46:07 +02:00
cf84371dad
use http_build_query instead of sprintf to improve readability
2023-05-28 01:58:44 +02:00
4d91d6ae27
use sprintf instead of concatenating
2023-05-28 01:13:12 +02:00
d60113a77a
drop setAccessible calls as they its NOOP since PHP 8.1
2023-05-27 22:02:24 +02:00
3f3327e2a1
use type safe assertions
2023-05-27 22:01:34 +02:00
8bf962ecee
add readonly identifier
2023-05-27 22:00:48 +02:00
b80431341e
remove pointless +0
2023-05-27 22:00:11 +02:00
f542788673
fix formatting
2023-05-27 21:59:55 +02:00
ab51d16de7
remove redundant assignment, use shorthard for nullable type
2023-05-27 21:43:04 +02:00
Nicolas CARPi
Will Power
William Hall
Rob Janssen
Nicolas CARPi
Matthijs
Jan
Mark Magyar