Adds resource+action based guards in the guard configuration

Can dry up your code by wiring action guards right at the controller.

Minute hardening

Adds a strpos patch if the Cookie key is interpreted as a int.

Laminas-Ready, Production-Hardened!

Laminas-focused release.

Last version to support Zend Framework

Next version moves to Laminas with 0.3

Stronger password validation, and a new Validator that auto-plugs your password checker strategy.

This release adds Zxcvbn password checking, a number of validation improvements, and starts the road toward PHP 7.4 with strong typehints, losing the 7.0 annotation baggage.

The added typehints have allowed me to relax some checks for weakness here and there.

This release also adds user-bound api tokens, a bin-packed uuid that you can use as a part of your external authentication needs.

Adds session key changes, as well as role helpers + goodbye PHP 7.1

Session key handing has changed a bit in this version, not in their function, but in how they are passed around the objects. The goal was to simplify key handing for use with https://github.com/Saeven/circlical-behat-fixtures (plug! A great tool to automatically wire fixtures with your Behat tests!).

If you were previously accessing the lower-level getSessionKey in your code, you'll want to rely on getRawSessionKey instead.

This release also adds Role helpers, so that you can check for roles from your templates.

Last release before a session key functionality change

In this version, and in those prior -- the Authentication Entity's session key parameter is base64 encoded in the constructor.

This unfortunately makes creating fixtures very painful -- this release essentially pins that mechanism.

In upcoming versions...

If you were using low-level entities instead of services, you will need to change your codebase just a bit.

The old setSessionKey becomes setRawSessionKey. Constructor invocations must base64 encode the session key at the instantiation point - the constructor will no longer do it. See tests for more.

Last halite 2.2 release. Moves to halite 3.3 after this one.

Merge pull request #30 from Saeven/feature/travis-change

Added method to helper, requireIdentity

Adds pluggable password-strength checking.

Tests checked in for password-strength checker.

Adding password-strength checker functionality.
Modified docs to support option.

Bugfix release

Adjusts a behavior where you could end up with a proliferation of auth cookies.