<feed xmlns='http://www.w3.org/2005/Atom'>
<title>FreshRSS (Customized)/app/Models/Auth.php, branch 1.5.0</title>
<subtitle>Customized version of FreshRSS, a self-hosted RSS feed aggregator</subtitle>
<id>https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.5.0</id>
<link rel='self' href='https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.5.0'/>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/'/>
<updated>2016-08-13T17:10:32+00:00</updated>
<entry>
<title>Do not mix POST and GET params</title>
<updated>2016-08-13T17:10:32+00:00</updated>
<author>
<name>Alexandre Alapetite</name>
<email>alexandre@alapetite.fr</email>
</author>
<published>2016-08-13T17:10:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=56ffc115d15bf136bfced74707ccc1f41c7b5e44'/>
<id>urn:sha1:56ffc115d15bf136bfced74707ccc1f41c7b5e44</id>
<content type='text'>
Avoid returning CSRF POST token for a GET
</content>
</entry>
<entry>
<title>CSRF token, update HTTP Referrer policy to same-origin</title>
<updated>2016-08-13T15:49:31+00:00</updated>
<author>
<name>Alexandre Alapetite</name>
<email>alexandre@alapetite.fr</email>
</author>
<published>2016-08-13T15:49:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=e6fd34bdda5d067a9e74714aaae10c89ed998a46'/>
<id>urn:sha1:e6fd34bdda5d067a9e74714aaae10c89ed998a46</id>
<content type='text'>
https://www.w3.org/TR/referrer-policy/#referrer-policy-no-referrer
https://github.com/FreshRSS/FreshRSS/issues/570
https://github.com/FreshRSS/FreshRSS/issues/955
https://github.com/FreshRSS/FreshRSS/issues/1198
https://github.com/FreshRSS/FreshRSS/issues/565
https://github.com/FreshRSS/FreshRSS/issues/554
</content>
</entry>
<entry>
<title>Remove Mozilla Persona login</title>
<updated>2016-07-31T12:58:19+00:00</updated>
<author>
<name>Alexandre Alapetite</name>
<email>alexandre@alapetite.fr</email>
</author>
<published>2016-07-31T12:58:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=c1548e732d7472c40473b3d99858059333a05eae'/>
<id>urn:sha1:c1548e732d7472c40473b3d99858059333a05eae</id>
<content type='text'>
https://github.com/FreshRSS/FreshRSS/issues/1052
</content>
</entry>
<entry>
<title>Fix a bug in FreshRSS_Auth::giveAccess()</title>
<updated>2015-01-06T21:43:24+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2015-01-06T21:43:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=8e6ab12e89504e3c44f766d319ac00cc7d58810a'/>
<id>urn:sha1:8e6ab12e89504e3c44f766d319ac00cc7d58810a</id>
<content type='text'>
See https://github.com/FreshRSS/FreshRSS/issues/730
</content>
</entry>
<entry>
<title>Fix last calls to Minz_Configuration methods</title>
<updated>2015-01-06T19:50:58+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2015-01-06T19:50:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=5f9672111f86c693d843138c00934a6c3eeede45'/>
<id>urn:sha1:5f9672111f86c693d843138c00934a6c3eeede45</id>
<content type='text'>
- We have still to fix actualize_script and greader api (refactoring?)
- We have to fix the FreshRSS_Configuration calls
- We have to fix availableLanguages calls

See https://github.com/FreshRSS/FreshRSS/issues/730
</content>
</entry>
<entry>
<title>BREAKING FEATURE: Remove general in config</title>
<updated>2015-01-06T17:53:36+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2015-01-06T17:53:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=d3a93ea2905ae50a2365d293f9f3ef3e51bf5f30'/>
<id>urn:sha1:d3a93ea2905ae50a2365d293f9f3ef3e51bf5f30</id>
<content type='text'>
General attribute has been removed from system config.
Now subattributes (e.g. environment, salt, title, etc.) are directly accessible.

YOU HAVE TO FIX YOUR ./data/config.php file!

- Remove the general array
- Values inside this array must be kept
- To see what it must look like, please have a look to ./data/config.default.php
  (but keep your values!!).

See https://github.com/FreshRSS/FreshRSS/issues/730
</content>
</entry>
<entry>
<title>New configuration system (not working yet)</title>
<updated>2015-01-05T15:54:16+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2015-01-05T15:54:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=51a71ec4b9d62528054be8faee1576a8fd6d37f6'/>
<id>urn:sha1:51a71ec4b9d62528054be8faee1576a8fd6d37f6</id>
<content type='text'>
- Use only Minz_Configuration
- register() method to load a new configuration file
- get() to get a configuration
- new exceptions related to configuration
- fix a list configuration calls to have FRSS working

Current problems to resolve:

- How to handle configuration param verifications (i.e. check auth_type
  is a value from none, http_auth, persona or form)
- We must use $conf = Minz_Configuration::get('system'); $general_conf = $conf-&gt;general;
  to access global system configuration which is quite annoying. How to change that?

See https://github.com/FreshRSS/FreshRSS/issues/730
</content>
</entry>
<entry>
<title>Ne pas rafraîchir les flux des utilisateurs non logués depuis x jours</title>
<updated>2014-10-28T23:45:42+00:00</updated>
<author>
<name>Alexandre Alapetite</name>
<email>alexandre@alapetite.fr</email>
</author>
<published>2014-10-28T23:45:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=9f97f7df8822ed2f32a9bc9d46ece92dee93089c'/>
<id>urn:sha1:9f97f7df8822ed2f32a9bc9d46ece92dee93089c</id>
<content type='text'>
https://github.com/marienfressinaud/FreshRSS/issues/681
Warning: needs some testing
</content>
</entry>
<entry>
<title>Authentication system moved + Persona comes back!</title>
<updated>2014-10-07T14:37:10+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2014-10-07T14:37:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=1252b3dd867e59917cf303f0c39c7da938b8ce32'/>
<id>urn:sha1:1252b3dd867e59917cf303f0c39c7da938b8ce32</id>
<content type='text'>
AuthController is dedicated to auhentication.
Persona is back, greater than ever!

See https://github.com/marienfressinaud/FreshRSS/issues/655
</content>
</entry>
<entry>
<title>Introduce FreshRSS_Auth::hasAccess('admin')</title>
<updated>2014-10-07T08:16:38+00:00</updated>
<author>
<name>Marien Fressinaud</name>
<email>dev@marienfressinaud.fr</email>
</author>
<published>2014-10-07T08:16:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.rdnlsmith.com/fresh-rss-custom/commit/?id=6009990935a2d06c252073f6b51ea5378536ef52'/>
<id>urn:sha1:6009990935a2d06c252073f6b51ea5378536ef52</id>
<content type='text'>
Replace Minz_Configuration::isAdmin($user). FreshRSS_Auth::hasAccess() could
be extended to others scopes later.

See https://github.com/marienfressinaud/FreshRSS/issues/655
</content>
</entry>
</feed>
