view release on metacpan or  search on metacpan

Changes  view on Meta::CPAN

Revision history for Dancer2-Plugin-Auth-Extensible

0.714 Mon 24 Aug 08:00:00 BST 2026

    [BUG FIXES]

    * Fix failing tests when sendmail binary not present on system.

0.713 Thu 13 Aug 12:00:00 BST 2026

    [BUG FIXES]

    * Fix the ability to generate links in emails that have dynamic hosts. The
      security fix in the previous release cached the first base URI, which
      meant that if an application intentionally supports different hosts for
      its generated emails (based on the reqest host) then these were always
      fixed at the first request.

0.712 Wed 12 Aug 12:00:00 BST 2026

    [SECURITY FIXES]

    * Add uri_base parameter (addresses CVE-2026-15689). If this is not set and
      if the application does not otherwise enforce a particular hostname, then
      an attacker can generate password reset emails and welcome emails for
      genuine users that contain links to a malicious host.

0.711 Thu 29 Aug 10:28:00 BST 2024

    [BUG FIXES]

    * Ensure uninit warnings not emitted

0.710 Sat 15 May 08:02:00 BST 2021

    [BUG FIXES]

    * Add Test::Fatal to list of dependencies (thanks yldr)
    * Fix config for test (thanks Nick Tonkin)

0.709 Sun 19 Apr 17:44:00 BST 2020

    [BUG FIXES]

    * Update tests to match RFC 7231 behavior of Dancer2 (thanks Ruth Holloway)

0.708 Fri 26 Apr 09:47:00 GMT 2019

    [BUG FIXES]

    * Attempt to fix intermittent test failures (thanks Tom Hukins)
    * Better check for HTTP::BrowserDetect to prevent strange test failures

0.707 Mon 20 Dec 21:55:00 GMT 2018

    [ENHANCEMENTS]

    * Add after_reset_code_success hook (thanks Nathan Bailey)

0.706 Mon 17 Dec 18:37:00 GMT 2018

    [BUG FIXES]

    * Fix various problems with return_url functionality

0.705 Mon 16 Oct 11:54:34 CEST 2017

    [BUG FIXES]

    * Correctly escape return URLs (Ben "whosgonna" Kaufman GH#79)

    [ENHANCEMENTS]

    * Add before_logout hook (Dominic Sonntag GH#70)

    [DOCS]

    * Add docs about making your own login pages (Jason Lewis GH#62)

0.704 Wed 12 Apr 15:04:46 CEST 2017

    [BUG FIXES]

    * Fix password reset when user is object (Andy Beverley GH#73)
    * Fix custom login template (Tadeusz “tadzik” Sośnierz GH#72)

    [MISC]

    * Deduplicate code related to login page rendering (Tadeusz “tadzik”
      Sośnierz GH#71)

0.703 Tue 29 Nov 10:25:10 CET 2016

    [BUG FIXES]

    * Bump dep on Dancer2 to 0.204000. Prior to that release after `forward`
      `params` were still available but were not cloned into `parameters`.
      This should fix GH #66.