10 Commits (75d135d8d4edda203cd289c705fdc6bb2f9cbec6)

Author	SHA1	Message	Date
Lukas Reschke	75d135d8d4	Fix tests for LoginController	10 years ago
Lukas Reschke	65d1472005	Don't use create mock ... Not compatible with this PHPunit version	10 years ago
Lukas Reschke	72b5f9bfac	Use createMock instead of deprecated getMock	10 years ago
Lukas Reschke	9ca25e857c	Redirect users when already logged-in on login form	10 years ago
Lukas Reschke	c1589f163c	Mitigate race condition	10 years ago
Lukas Reschke	ba4f12baa0	Implement brute force protection ... Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)	10 years ago
Thomas Müller	232d735893	Do not leak the login name - fixes #25047	10 years ago
Christoph Wurst	ad10485cec	when generating browser/device token, save the login name for later password checks	10 years ago
Christoph Wurst	dfb4d426c2	Add two factor auth to core	10 years ago
Joas Schilling	392bc0c6b9	Move tests/core/ to PSR-4	10 years ago
Lukas Reschke	ee0ebd192a	Use proper URL generation function (#24576) ... Fixes the redirection after login, otherwise `core/files/index` is opened which fails.	10 years ago
Christoph Wurst	0486d750aa	use the UID for creating the session token, not the login name	10 years ago
Christoph Wurst	aa85edd224	increase token column width ... add some range to time() assertions	10 years ago
Christoph Wurst	aafd660b97	fix LoginController unit tests	10 years ago
Lukas Reschke	8222ad5157	Move logout to controller ... Testable code. Yay.	10 years ago
Lukas Reschke	fee95084ae	Rename `username` to `loginName` ... UID and login name are two different things.	10 years ago
Lukas Reschke	8a650a51be	Use !== instead of empty ... Users can be named null	10 years ago
Lukas Reschke	331e4efacb	Move login form into controller ... First step on getting the authorisation stuff cleaned up. This is only for the login form, all other stuff is still where it is.	10 years ago