1.017 26 May 2021
- Minor POD spelling, formatting and link fixes
- Add missing dependency on Class::Accessor::Fast (RT#127730)
1.016 11 Februrary 2016
- Document how to limit the attributes returned from the LDAP search
- Add persist_in_session config option to allow storing of user and its
roles in the session without hitting the LDAP store on each request
- fix use_roles enabled if explicitly disabled
1.015 20 February 2015
- Escape special characters in user/role names
- Use the stored user credentials to look up roles
- Split credential checking into a separate method from generic binding
1.014 26 April 2013
- Don't fall back to unauthenticated bind when authenticating
1.013 9 January 2013
- fix for https://rt.cpan.org/Ticket/Display.html?id=81908 security hole.
1.012 5 October 2010
- add methods conforming to the Catalyst::Authentication::User API
as required here:
http://search.cpan.org/dist/Catalyst-Plugin-Authentication/lib/Catalyst/Plugin/Authentication/Internals.pod#USER_METHODS
Nudging provided via RT https://rt.cpan.org/Ticket/Display.html?id=60793
- add documentation for Active Directory at suggestion of Adam Wohld
- Make ->can work for AUTOLOADED $user methods
1.011 7 July 2010
- fix t/05-user_attributes.t to skip correct number of tests if
Catalyst::Model::LDAP is not installed.
1.010 6 July 2010
- Make AUTOLOAD method work for ->dn by generically calling has_attribute
which has a special case for it.
- Unify the handling of the ->username method between AUTOLOAD and
has_attribute by special casing it more generically in has_attribute.
Both RT#57610, patch and tests by Jason Fried
1.009 15 May 2010
- Fix pod for get_user() and from_session() in Backend.pm, adding
the missing $c param. Pass $c in from_session() through to get_user().
Reported in https://rt.cpan.org/Ticket/Display.html?id=56983 with
patch from Bjørn-Olav Strand.
1.008 02 April 2010
- Allow for multiple uid values on a User object. See RT
https://rt.cpan.org/Ticket/Display.html?id=51505
and patch from Andrew Kirkpatrick.
1.007 19 Mar 2010
- Store the user password for the ldap_connection method in an inside
out hash rather than a closure so that the user object can be serialized
with Storable as people are putting them in the session (RT#53279)
1.006 11 Dec 2009
- Pass $c along to find_user method so overridden user_class users can
get at models (or whatever crazy things they might do) (gphat)
- Add an ldap_connection method to the user class, which will return
an LDAP connection bound as the user who authenticated.
- Trim trailing whitespace from submitted usernames otherwise we generate
bad LDAP queries.
0.1005 30 April 2009
- Stop throwing an exception when the lookup_user method fails
to find a user and instead return undef. (t0m)
- Add tests for above (t0m)
- Change documentation which still refers to the old ::Plugin:: style
auth system to use ->authenticate instead of ->login, and not say that
you need to do things manually to have multiple stores. (t0m)
0.1004 21 Oct 2008
- Add the ability to have the user inflated into a custom
user class with the user_class option (t0m)
- Add the ability for role lookup to be performed within
the same (user) bind context that the user's password is
checked in (t0m)
0.1003 10 Sept 2008
- get entries in array context rather than scalar context,
allowing for multiple values. patch by scpham.
- lc() to compare Net::LDAP results with supplied $id
bug reported via RT #39113
0.1002 9 July 2008
- tests updated to use Net::LDAP::Server::Test 0.03
0.1001 9 April 2008
- matthewr pointed out that the SYNOPSIS 'use Catalyst' line is wrong.
- imacat reported that t/03-entry was failing when Catalyst::Model::LDAP was
not installed. Fixed RT# 34777.
0.1000 4 Feb 2008
- forked from Catalyst::Plugin::Authentication::Store::LDAP and name changed
to Catalyst::Authentication::Store::LDAP
- tests now use Net::LDAP::Server::Test instead of relying on openldap.org
- changed release date for 0.0600
- added AD config suggestions from matija@serverflow.com
- bumped req base Auth package to 0.10003
- lookup_user() now throws an exception if there is more than one entry returned
from a LDAP search
- added new user_search_filter config option to filter out multiple entries on
Perl side
0.0600 karman 18 Oct 2007 [was: omega Thu Aug 09 09:22:00 CET 2007]
- Someone had put some 0.052 version out, need to bump past that
- Add realms API support to match newest C::P::Authentication API. (karman)
- Add POD tests. (karman)
0.06 omega Thu Aug 09 09:00:00 CET 2007
- Added support for entry_class in the same way that Catalyst::Model::LDAP
supports it, allowing one to override what class is returned from
$c->user->ldap_entry, and thus allowing one to add methods to the user
object
0.05
- Added support for multiple identifiers.
0.04 adam Tue Mar 21 15:31:57 PST 2006
- Fixed rt.cpan.org #18250, sample YAML config incorrectly using arrays
- Added some error checking around whether or not we have been properly
configured.
0.03 adam Fri Feb 17 09:51:36 PST 2006
- Gavin Henry's documentation patch for YAML configuration
0.02 adam Fri Feb 10 14:10:23 PST 2006
- Now throws an exception if the initial bind fails
- Changed the default role_filter from (member=%s) to (memberUid=%s)
- Fixed bug in Backend->lookup_user that was not properly handling
when a user was not found in the backing store at all.
0.01 adam Thu Feb 8 14:28:18 2006
- initial revision
- supports authentication
- supports roles