* fix: deprecated use of non-static method

* upd: replace SaltFactory with PasswordHashFactory

…d list (#53)

Co-authored-by: Philipp Seßner <[email protected]>

Resolves: #59

Co-authored-by: Cyril Janody <[email protected]>

* [FEATURE] Add PKCE Proof of Key for Code Exchange

enableCodeVerifier switch in extension configuration is used to enable
the PKCE flow. No further configuration is needed. Implemented
for authentication without password only.

* [FEATURE] Make redirect URI configurable

You can now configure the URI that will be called back by the
authorization server (oidcRedirectUri). If left blank the standard
callback script is used.

Resolves #62

…rs (#64)

* [FEATURE] Login plugin: Allow to configure authorization URL parameters

Allow to add query parameters to the authorization redirect URL via
TypoScript.

* [TASK] Add authorizationUrlOptions sample

[BUGFIX] Respect usersStoragePid

Resolves #65

[BUGFIX] Use makeInstance for creating hook objects

If the extbased version of felogin is used, this ViewHelper can be used to retrieve the link

[FEATURE] LinkViewHelper for felogin based on extbase

… TYPO3

Resolves: #44

Resolves: #44

As userStoragePid, a comma-separated list can now be provided.
The first item is used to store new users.

Resolves: #79

When nginx is running in a docker container, the server_name is often "_" [1]:
> In catch-all server examples the strange name "_" can be seen:
> server {
>     listen       80  default_server;
>     server_name  _;
>     return       444;
> }
> There is nothing special about this name, it is just one of a myriad
> of invalid domain names which never intersect with any real name.

Since callback.php uses $_SERVER['SERVER_NAME'] and thus redirects to
http://_/?type=1489657462&state=...

This patch detects that special host name and falls back to using
the HTTP "Host" header instead.

When a non-standard port is used, the Host header also contains
the port number[2], so no further port detection is needed.

[1] https://nginx.org/en/docs/http/server_names.html
[2] https://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23

Possible problems/PHP warnings will be tackled with as they pop up.

Related: #84

Related: #84

[FEATURE] Adds German translation for backend forms

Resolves: #85

Resolves: #87

[BUGFIX] Prevent PHP warning in AuthenticationController with PHP 8

Resolves: #89

…variable

[BUGFIX] Prevent PHP warning in LoginController with PHP 8

using t3ll

using t3ll

Resolves: #96

Locallang cleanup and updated German translations

[FEATURE] Use HTTP_REFERER as oidc_redirect_url

[TASK] Use logFileInfix for logging configuration example

[TASK] Cleanup AuthenticationService

[TASK] Use inherited logger

Remove direct access to globals.

[TASK] Use logging via container

[TASK] Use Core ExtensionConfiguration class

[TASK] Remove old felogin support

[FEATURE] Merge with existing fe_user if username matches email

[TASK] Cleanup extension config

[TASK] Various minor cleanups

When the usergroup assignment has to be
bulk changed due to a change in tx_oidc_pattern
it is avoided to load all affected users
into memory.
Instead, process each user sequentially.

It is still needed for non-composer installations

[BUGFIX] Restore ext_emconf.php

[TASK] Do not load all users into memory

Use valid version number in ext_emconf

The new ModifyUserEvent allow to modify the
user record before it is inserted/updated in
the database.

This uses the grant 'client_credentials'.

[FEATURE] Make auth service priority/quality configurable

[FEATURE] Add method to retrieve access token for client

[FEATURE] Add event for post-processing a user record

[BUGFIX] Set correct branch alias

This allows pre-processing of the resource owner
received by the server before it is converted
to a user.

Resolves: #76

[FEATURE] Add ModifyResourceOwnerEvent

The callback is handled as a generic middleware.
The URL magic is gone and the current request
is simply enriched with the specific page-type
for further handling in the controller.

The default redirectUri now is the startpage
of the site.

Resolves: #104