4 Commits

Author	SHA1	Message	Date
Clark Winkelmann	08ba2599d7	Refactor Access Tokens (#2651) ... - Make session token-based instead of user-based - Clear current session access tokens on logout - Introduce increment ID so we can show tokens to moderators in the future without exposing secrets - Switch to type classes to manage the different token types. New implementation fixes #2075 - Drop ability to customize lifetime per-token - Add developer access keys that don't expire. These must be created from the database for now - Add title in preparation for the developer token UI - Add IP and user agent logging - Delete all non-remember tokens in migration	2021-03-04 16:50:38 -05:00
Franz Liedke	31765388c1	Tests: Stop using Eloquent models for seeding data	2021-01-07 17:34:13 -05:00
Franz Liedke	25f772c1ea	Replace authenticatedRequest() by request() option ... I feel this makes the parameters a bit more clear, does not rely on inheritance (you can only inherit from one class, but we might want more of these helpers in the future), and has less side effects (e.g. no creation and, more importantly, deletion of users in the database). Refs #2052.	2020-03-20 18:23:06 +01:00
Franz Liedke	a13c0bb612	Tests: Extract trait for building requests	2020-03-20 17:51:03 +01:00