Address Session Fixation Concerns - #900

Merged

jaredhanson merged 28 commits into

May 20, 2022

Commits on May 17, 2022

Regenerate session on login.
jaredhanson
committed
7e9b9cf
Fix tests.
jaredhanson
committed
a7513c4

Commits on May 18, 2022

Regenerate session in logout.
jaredhanson
committed
a77271f
Save session on login before invoking callback.
jaredhanson
committed
9cde808
Clear user from old session on logout.
jaredhanson
committed
c018dea
Fix tests.
jaredhanson
committed
fa80b20
Error if session isn't available.
jaredhanson
committed
fa70e2f
Handle logout without session manager.
jaredhanson
committed
88c1f1b

Commits on May 19, 2022

Add test.
jaredhanson
committed
71c54f6
Add tests.
jaredhanson
committed
cc7606c
Add tests.
jaredhanson
committed
ee0bf81
Add tests.
jaredhanson
committed
cfa8259
Clean up tests.
jaredhanson
committed
b395106
Add tests.
jaredhanson
committed
3001654
Add tests.
jaredhanson
committed
80cc4e3
Better session detection and exceptions.
jaredhanson
committed
294f22c
Add tests.
jaredhanson
committed
c1991cf
Add tests.
jaredhanson
committed
8825a9a
Add optional options to login and logout.
jaredhanson
committed
e69834e
Add option to keep session data.
jaredhanson
committed
a349c2b
Add option to keep session data on logout.
jaredhanson
committed
17111d7
Add tests.
jaredhanson
committed
bfba8a1
No need to guard callback existence.
jaredhanson
committed
29a90d6
Add tests.
jaredhanson
committed
f8a175f
Add tests.
jaredhanson
committed
987b191
Silence verbose logging.
jaredhanson
committed
46756e5
Change keepSessionData to keepSessionData.
jaredhanson
committed
4f6bd5b

Commits on May 20, 2022

Use utils-merge rather than Object.assign for compatibility.
jaredhanson
committed
8dd79fe