Version upped

avoid warnings when decoding login cookie

The login cookie might not be set by oauth. That's fine but we need to
avoid the warnings.

translation update

translation update

translation update

Version upped

do not clear login data on every load

logoff is called a lot when a user is not authenticated yet. This can
interfere with the oauth login process when calls are made while the
user is at the IdP, f

do not clear login data on every load

logoff is called a lot when a user is not authenticated yet. This can
interfere with the oauth login process when calls are made while the
user is at the IdP, for example triggered by AJAX beacons like created
by the statistics plugin.
There is no real reason to delete the temporary session data. We can
simply keep it until it is used or replaced by new data.

show more ...

option to enforce oauth for some users

Version upped

Add http response body to HttpTokenResponseException

Because response body is also helpful for error handler.

Signed-off-by: Naoto Kobayashi <naoto.kobayashi4c@gmail.com>

Version upped

Add HttpTokenResponseException making error handling easy

Although http status code and http error message are helpful in error handling,
TokenResponseException, throwed by oauth\HTTPClient if an er

Add HttpTokenResponseException making error handling easy

Although http status code and http error message are helpful in error handling,
TokenResponseException, throwed by oauth\HTTPClient if an error occured during
the http request, does not have fields/methods which indicate them directly.

Solve it by adding HttpTokenResponseException which has indicators of http status
code and http error message, and throwing it instead of TokenResponseException.

Signed-off-by: Naoto Kobayashi <naoto.kobayashi4c@gmail.com>

show more ...

translation update

Version upped

automatic style fixes and new workflows

translation update

Version upped

Setup .gitattributes file

This is to exclude unrelated files for installation

translation update

translation update

Version upped

do not require password in session. replaces #135

We do not really care for the password in the session and usually don't
even have it when authenticating via oAuth.

This fixes a warning on PHP 8+

Version upped

fix user comparison and skip update on protected users

The farmer lets us know when a user is protected and can't be written,
so we can actually skip the update completely. fixes #132 for good

Only update local user cache when userdata has changed

There is no need to update the local user on every login when nothing
has changed.

This should fix most instances of #132 - if the oAuth provi

Only update local user cache when userdata has changed

There is no need to update the local user on every login when nothing
has changed.

This should fix most instances of #132 - if the oAuth provider data has
actually updated, the user would have to log into the farmer to update
the data though.

show more ...