11 Commits

Author	SHA1	Message	Date
Lukas Reschke	f93a82b8b0	Remove explicit type hints for Controller ... This is public API and breaks the middlewares of existing apps. Since this also requires maintaining two different code paths for 12 and 13 I'm at the moment voting for reverting this change. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	2017-08-01 17:32:03 +02:00
Roeland Jago Douma	3548603a88	Fix middleware implementations signatures ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	2017-07-31 16:54:19 +02:00
Joas Schilling	72c1b24844	Check whether the $_SERVER['REQUEST_*'] vars exist before using them ... Signed-off-by: Joas Schilling <coding@schilljs.com>	2017-05-15 14:33:27 +02:00
Christoph Wurst	6af2efb679	prevent infinite redirect loops if the there is no 2fa provider to pass ... This fixes infinite loops that are caused whenever a user is about to solve a 2FA challenge, but the provider app is disabled at the same time. Since the session value usually indicates that the challenge needs to be solved before we grant access we have to remove that value instead in this special case.	2016-08-24 10:49:23 +02:00
Roeland Jago Douma	33f1532079	Throw exception if you don't handle it	2016-08-12 14:04:23 +02:00
Joas Schilling	ba87db3fcc	Fix others	2016-07-21 18:13:57 +02:00
Joas Schilling	3e3b326c85	Allow to cancel 2FA after login	2016-06-07 18:17:29 +02:00
Christoph Wurst	5e71d23ded	remember redirect_url when solving the 2FA challenge	2016-06-01 14:43:47 +02:00
Lukas Reschke	aba539703c	Update license headers	2016-05-26 19:57:24 +02:00
Christoph Wurst	847bbc51b6	add OCC command to enable/disable 2FA for a user	2016-05-23 11:21:13 +02:00
Christoph Wurst	dfb4d426c2	Add two factor auth to core	2016-05-23 11:21:10 +02:00