Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/83/6483/11' of ssh://gerrit.tuleap.net:29418/tuleap into stable

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #9578: Session tokens are stored in clear in the database

+592 −326
Nicolas Terray (nterray) 2017-01-27 11:56
Nicolas Terray (nterray) 2017-01-27 11:56
b03668c448abc6ed3a4e3fbc336572da60f09c79
git #tuleap/stable/b03668c448abc6ed3a4e3fbc336572da60f09c79

Modified Files

Side by side diff
Inline diff
Name
M src/common/autoload.php +6 −3 Go to diff View file
M src/common/dao/SessionDao.class.php +39 −1 Go to diff View file
M src/common/dao/UserDao.class.php +0 −59 Go to diff View file
A src/common/user/InvalidSessionException.php +27 −0 Go to diff View file
A src/common/user/SessionDataAccessException.php +27 −0 Go to diff View file
A src/common/user/SessionManager.php +147 −0 Go to diff View file
M src/common/user/SessionNotCreatedException.class.php +9 −4 Go to diff View file
M src/common/user/UserManager.class.php +47 −42 Go to diff View file
M src/common/user/User_SOAPServer.class.php +2 −0 Go to diff View file
M src/db/mysql/database_structure.sql +4 −5 Go to diff View file
A src/db/mysql/updates/2016/201609131045_update_session_management.php +62 −0 Go to diff View file
M src/utils/include.py +11 −0 Go to diff View file
M src/utils/session.py +16 −6 Go to diff View file
A tests/simpletest/common/user/SessionManagerTest.php +160 −0 Go to diff View file
M tests/simpletest/common/user/UserManagerTest.php +32 −205 Go to diff View file
M tests/simpletest/common/user/User_SOAPServerTest.php +3 −1 Go to diff View file