Revision history for Perl extension CGI::Application::Plugin::Authentication.

0.11  Wed Jul 26 11:16:12 EDT 2006

    - suppress warning about missing Color::Calc unless the user is actually
      trying to use it (reported by Ron Savage)
    - explicitly load CGI.pm since some users may be using CGI::Simple
      (reported by Ron Savage)
    - Fixed bug in Cookie store where the expiry time of the cookie was ignored
      (patch by POLETTIX)

0.10  Thu May 18 22:59:56 EDT 2006

    - Add support for Authen::Simple (all Authen::Simple modules can
      be used directly as Drivers)
    - Made the login page much more customizable:
      - change any of the text
      - customize the colours - provide one base colour and lighter and
        darker shades are automatically generated (requires Color::Calc)
      - offer to remember the users username in a cookie for the next
        time they login
      - add option for a 'forgotten password' URL
      - add option for a 'register new account' URL
      - add option to supress the stylesheet so you can provide your own

0.09  Thu Jan 26 20:56:29 EST 2006

    API Changes
    - Added option to provide your own HTML for the login box through a callback
      (Shawn Sorichetti)
    - Added POST_LOGIN_RUNMODE callback (Shawn Sorichetti)

0.08  Wed Nov 23 20:20:24 EST 2005

    API Changes
    - Removed ability to configure the DBI driver with a DSN and
      username/password.  CGI::Application::Plugin::DBH should be used for
      that instead (Mark Stosberg) 
    - DBI driver defaults to $self->dbh() if DBH not provided (Mark Stosberg)

    Bug Fixes
    - Made MIME::Base64, Digest::SHA1 and CGI::Cookie mandatory requirements
      and load them at compile time instead of runtime in the Cookie store.
      (fixes problem reported by Richard Jones)

    Other updates
    - Added Driver that can authenticate against htpasswd files
    - Fixed typo in examples/sample.cgi
    - Fixed typo in lc filter example (Mark Stosberg)
    - Updated docs for initialize(), and made it return true value
      (Mark Stosberg)


0.07  Sat Oct 29 17:08:48 EDT 2005

    API Changes
    - Config parameters ending in _DESTINATION have
      been renamed to _URL for clarity.
      (Mark Stosberg)

    Bug Fixes
    - DBI Driver was incorrectly using DBH option when
      it should have used the DSN option
      (patch from Jim McQuillan)
    - Tests were failing if certain modules were not
      installed.
      (fixed by Shawn Sorichetti)

    Other updates
    - add negative regexp example for the
      'protected_runmodes' method
      (suggested by Larry Leszczynski)

0.06  Fri Oct 14 14:05:52 EDT 2005

    Bug Fixes
    - fix autorunmode test so it doesn't fail
      if the AutoRunmode plugin is not installed

0.05  Fri Oct 14 13:15:23 EDT 2005

    New Stuff
    - add ability to timeout logins based on last
      successful login, or with a custom callback
      (as well as the original last access timeout)
    - add 'last_access' and 'last_login' methods
    - add 'is_login_timeout' to show when a login
      request is caused by an idle login session
    - added lots more tests

    Bug Fixes
    - login timeouts were not working properly
    - the Cookie Store was not honouring the EXPIRY option
    - using :all in protected_runmodes now works
    - fix test failure when Test::Warn not installed
      (fixed by Shawn Sorichetti)

    Experimental
    - subroutine attributes: you can specify that a
      runmode should be protected with a subroutine
      attribute.  example:  sub my_rm :Authen { ... }
      This conflicts with the AutoRunmode plugin right now


0.04  Thu Sep 22 21:06:54 EDT 2005

    API Changes
    - renamed 'encoders' to 'filters' - This should only affect
      driver writers and not end users

    New Stuff
    - filters (formerly encoders) can now be chained (See docs)
    - filters can take a param (See docs)
    - added filters for uc, lc and trim
    - added a simple sample application
    - more docs (based on suggestions from Ron Savage)


0.03  Mon Sep 19 14:57:47 EDT 2005

    API Changes
    - renamed the 'auth' method to 'authen' to make it easier
      to distinguish from the upcoming 'authz' plugin.  There
      is also an alias to 'authentication' for those who like
      clarity over brevity.
    - For the DBI driver, changed credential identifiers from
      cred_1 to __CREDENTIAL_1__

    New Drivers
    - Dummy Driver - accepts any credentials as valid

    New Stuff
    - Added little icons to the default login and password
      fields (only works in Mozilla based browsers)
    - if STORE config is not given, the plugin will detect if
      you are already using the Session plugin, and use the
      Session Store instead of the Cookie Store.
    - Added a lot of new documentation

    Bug Fixes
    - 'run_modes' method was incorrectly being used in the
      test suite (reported by Ron Savage)

0.02  Fri Sep 16 00:19:10 EDT 2005

    New Drivers
    - DBI Driver

    New Stores
    - Cookie store (requires no server side storage)

    New Stuff
    - Added field encoding support for datastores that
      keep passwords in an encoded format, like Unix crypt,
      or MD5.
    - Added encoders for crypt, MD5 and SHA1
    - Added some more methods to Driver.pm that can simplify
      the building of new Driver modules (find_option, encode,
      check_encoded, strip_field_names)
    - Added lots more tests to the test suite
      (Cees and Shawn Sorichetti)

    Bug Fixes
    - Fixed Generic Driver when using array of arrays method.
    - Options no longer get clobbered by the modules.
      (reported by Shawn Sorichetti)


0.01  Fri Sep  9 00:44:17 EDT 2005

    - original version