Changeset 1864091

Timestamp:

04/25/2018 10:41:55 AM (8 years ago)

Author:

authentiq

Message:

Preparing for 1.0.4 release

Location:

authentiq/trunk

Files:

• CHANGELOG.txt (modified) (1 diff)
• README.txt (modified) (2 diffs)
• authentiq.php (modified) (2 diffs)
• includes/class-authentiq-provider.php (modified) (1 diff)
• public/js/authentiq-public.min.js (modified) (1 diff)

authentiq/trunk/CHANGELOG.txt

@@ -1 +1 @@
 == Changelog ==
+
+= 1.0.4 - 2018-04-25 =
+
+* Tweak - OAuth2 `state` parameter stored as session cookie. Fixes Issue #1.
 
 = 1.0.3 - 2017-12-17 =

authentiq/trunk/README.txt

@@ -4 +4 @@
 Requires at least: 4.6
 Tested up to: 4.9
-Stable tag: 1.0.3
+Stable tag: 1.0.4
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -112 +112 @@
 == Changelog ==
 
+= 1.0.4 - 2018-04-25 =
+
+* Tweak - OAuth2 `state` parameter stored as session cookie. Fixes Issue #1.
+
 = 1.0.3 - 2017-12-17 =
 

authentiq/trunk/authentiq.php

@@ -4 +4 @@
  * Plugin URI:        https://wordpress.org/plugins/authentiq
  * Description:       Sign in (and sign up) to WordPress sites using the Authentiq ID app. Strong authentication, without the passwords.
- * Version:           1.0.3
+ * Version:           1.0.4
  * Author:            The Authentiq Team
  * Author URI:        https://www.authentiq.com
@@ -21 +21 @@
 define('AUTHENTIQ_PLUGIN_DIR', trailingslashit(plugin_dir_path(__FILE__)));
 define('AUTHENTIQ_PLUGIN_URL', trailingslashit(plugin_dir_url(__FILE__)));
-define('AUTHENTIQ_VERSION', '1.0.3');
+define('AUTHENTIQ_VERSION', '1.0.4');
 define('AUTHENTIQ_NAME', 'authentiq');
 define('AUTHENTIQ_LANG', AUTHENTIQ_NAME);

authentiq/trunk/includes/class-authentiq-provider.php

@@ -731 +731 @@
 
         $state = wp_generate_password(24, false);
-        @setcookie(self::$cookie_name, $state, (time() + (60 * 30)), '/', '', is_ssl(), true);
+        // store it as a session cookie
+        @setcookie(self::$cookie_name, $state, 0, '/', '', is_ssl(), true);
         $_COOKIE[self::$cookie_name] = $state;
 

authentiq/trunk/public/js/authentiq-public.min.js

@@ -1 +1 @@
 /*!
- * Authentiq WordPress plugin - v1.0.3
+ * Authentiq WordPress plugin - v1.0.4
  *
  * Authentiq