view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

Revision history for Perl extension Catalyst::Plugin::Authentication

0.10028 - 2026-08-08
    - fix warnings when authenticating and no password is stored
    - fix return value from Catalyst::Authentication::User::Hash->can
    - update password_type documentation do discourage non-secure options
    - fix use of CERT_ values in Credential::Remote source
    - documentation spelling fixes
    - fix develop prereq on Test::Pod::Coverage::TrustMe

0.10_027 - 2026-06-07
    - When used with Catalyst::Plugin::Session, rotate the session id after a
      successful login to avoid session fixation attacks (CVE-2009-10007).

0.10026 - 2026-05-21
    - no changes since 0.10_025

0.10_025 - 2026-05-19
    - fix password comparison to avoid timing attacks (CVE-2026-5091)

0.10024 - 2024-10-16
    - update to prefer modern Catalyst APIs
    - silence expected warnings in tests
    - move repository to GitHub
    - convert tests from Test::WWW::Mechanize::Catalyst to Catalyst::Test
    - don't load unneeded Tie::RefHash
    - switch from Digest::SHA1 to Digest::SHA
    - switch from Test::Exception to Test::Fatal
    - drop unused dependency Class::Inspector
    - Don't load password when password_type is 'none',
      for example when used for authorization

0.10023 11 Jan 2013
   - Add Howto on using the auth from the proxy server with
     ::Credential::Remote (Robert Rothenberg)

0.10022 08 Jan 2013
    - Fix NoPasswd store (skaufman)

0.10021 30 June 2012
    - Change all classes to Moose and MooseX::Emulate::Class::Accessor::Fast,
      fixing undeclared dependency on Class::Accessor::Fast.
    - Change Catalyst::Authentication::Realm to use String::RewritePrefix
      rather than doing namespace mangling manually.
    - Fix whitespace and tabs, add Test::EOL and Test::NoTabs
    - Document optional methods in stores needed for auto_create_user
      and auto_update_user in realms.
    - Clarify support channels
    - Note primary maintainer in docs.
    - Add x_authority metadata.
    - Get the NAME right by making it 1 line, due to crappy parsing
      in EU::MM (RT#77028)

0.10020 05 May 2012
     - Allow user_class to be configured for Catalyst::Authentication::Store::Minimal
       (Jochen Lutz <jlu@akk.org>)

0.10019 14 April 2012
     - Upgrade code to use Moose compatibility layer (jnap)
     - Added some rules to .gitignore for people using macs (jnap)
     - Updated copyright info
     - Catalyst::Plugin::Authentication::Credential::NoPassword added
       (Okko)
     - Convert repository to git (fREW Schmidt)

0.10018 29 Jul 2011
     - Fix failing tests with the new PSGI Catalyst dev release

0.10017 24 Jan 2010
     - Fix failing tests with the new PSGI Catalyst dev release

0.10016 22 Jan 2010
     - Move root actions out of applcation class in tests to remove
       warnings in the latest Catalyst.
     - Add AUTOLOAD method to the default user class so that methods are
       delegated down onto the underlieing user object retrieved from
       the store (if present)
     - Fix typos in documentation (RT#49476)
     - Fix compatibilty with Catalyst 5.70 (RT#50466)
     - Various documentation improvements
     - Fix Realm::Processive's authinfo_munge option (RT#47106)

0.10015 Tue Sep 1 01:40:36 BST 2009

     - Remove (undeclared) dependency on Class::Data::Inhertiable (RT#49086)
     - Remove dependency on Test::MockObject
     - Fix repository metadata in META.yml / Makefile.PL
     - Make POD tests author side only.