Commits

Breadcrumbs

History for

ontrunk

User selector

All users

All time

Commit History

Commits on Apr 3, 2025

• Security: Don't fail the Argon2-related tests when it's not available on the test infrastructure.

  Show description for a9370e9
  johnbillion

  committed
  a9370e9

  Copy full SHA for a9370e9

• Application Passwords: Correct the fallback behaviour for application passwords that don't use a generic hash.

  Show description for ff65b7e
  johnbillion

  committed
  ff65b7e

  Copy full SHA for ff65b7e

Commits on Mar 3, 2025

• Security: Reduce the length of the hash returned by `wp_fast_hash()` so it can be used in the `user_activation_key` field when a legacy database schema is still in use.

  Show description for b5e0c16
  johnbillion

  committed
  b5e0c16

  Copy full SHA for b5e0c16

Commits on Feb 28, 2025

• Security: Reintroduce support for passwords hashed with MD5.

  Show description for 360732e
  johnbillion

  committed
  360732e

  Copy full SHA for 360732e

Commits on Feb 17, 2025

• Security: Switch to using bcrypt for hashing user passwords and BLAKE2b for hashing application passwords and security keys.

  Show description for f444639
  johnbillion

  committed
  f444639

  Copy full SHA for f444639

Commits on Jan 9, 2025

• Login and Registration: Check that the `$_POST` values are strings in `wp_signon()`.

  Show description for a48e180
  SergeyBiryukov

  committed
  a48e180

  Copy full SHA for a48e180

Commits on Jul 3, 2024

• Users: Pass the previous state of the user as context to the `wp_set_password` hook.

  Show description for 5466b9c
  SergeyBiryukov

  committed
  5466b9c

  Copy full SHA for 5466b9c

Commits on Jun 5, 2024

• Login and Registration: Declare globals at the top of `wp_signon()` for consistency.

  Show description for ac84bd5
  SergeyBiryukov

  committed
  ac84bd5

  Copy full SHA for ac84bd5

Commits on Jun 4, 2024

• Login and Registration: Flush `user_activation_key` after successfully login.

  Show description for ce6d1d6
  audrasjb

  committed
  ce6d1d6

  Copy full SHA for ce6d1d6

Commits on Apr 13, 2024

• Users: Account for returning `false` from the `authenticate` filter.

  Show description for d898ee7
  SergeyBiryukov

  committed
  d898ee7

  Copy full SHA for d898ee7

Commits on Apr 12, 2024

• Docs: Fix various typos and spelling mistakes.

  Show description for 11bc9c9
  swissspidy

  committed
  11bc9c9

  Copy full SHA for 11bc9c9

Commits on Mar 28, 2024

• Tests: Use an existing user fixture in the test for logging in with an email address.

  Show description for 86d4273
  SergeyBiryukov

  committed
  86d4273

  Copy full SHA for 86d4273

Commits on Feb 26, 2024

• Login and Registration: Slash email address when updating an existing user.

  Show description for d1e7c85
  swissspidy

  committed
  d1e7c85

  Copy full SHA for d1e7c85

Commits on Oct 9, 2023

• REST API: Correct parsing of password from Authorization header when processing Application Password credentials.

  Show description for a55dcf4
  kadamwhite

  committed
  a55dcf4

  Copy full SHA for a55dcf4

Commits on Aug 24, 2023

• Login and Registration: Improve test coverage for sign on related functions

  Show description for 1fc1e9c
  aaronjorbin

  committed
  1fc1e9c

  Copy full SHA for 1fc1e9c

Commits on Feb 9, 2023

• Login and Registration: Set correct default values in `wp_signon()`.

  Show description for 7104aa0
  SergeyBiryukov

  committed
  7104aa0

  Copy full SHA for 7104aa0

Commits on Feb 7, 2023

• Build/Test Tools: Add unit tests for `wp_set_password` hook.

  Show description for face5a9
  audrasjb

  committed
  face5a9

  Copy full SHA for face5a9

Commits on Sep 6, 2022

• Tests: Use the factory method instead of the property.

  Show description for ff56396
  SergeyBiryukov

  committed
  ff56396

  Copy full SHA for ff56396

• Tests: Correctly use the factory method.

  Show description for bfdc8ef
  SergeyBiryukov

  committed
  bfdc8ef

  Copy full SHA for bfdc8ef

Commits on Nov 15, 2021

• Users: Prevent infinite loop when using capability checks during `determine_current_user` on multisite.

  Show description for 91c3f80
  TimothyBJacobs

  committed
  91c3f80

  Copy full SHA for 91c3f80

Commits on Nov 4, 2021

• Coding Standards: Add visibility to methods in `tests/phpunit/tests/`.

  Show description for 40ac5de
  hellofromtonya

  committed
  40ac5de

  Copy full SHA for 40ac5de

Commits on Aug 7, 2021

• Build/Test Tools: Implement use of the `void` solution.

  Show description for ddb409e
  SergeyBiryukov

  committed
  ddb409e

  Copy full SHA for ddb409e

Commits on Feb 27, 2021

• Build/Test Tools: Fix and standardise calls to the `tearDown()` method in the test suite.

  Show description for 055deea
  johnbillion

  committed
  055deea

  Copy full SHA for 055deea

Commits on Feb 10, 2021

• Tests: Use `assertSame()` in some newly introduced tests.

  Show description for 3d259c2
  SergeyBiryukov

  committed
  3d259c2

  Copy full SHA for 3d259c2

Commits on Jan 29, 2021

• App Passwords: Introduce introspection endpoint.

  Show description for e290a9b
  TimothyBJacobs

  committed
  e290a9b

  Copy full SHA for e290a9b

Commits on Jan 2, 2021

• App Passwords: Only attempt auth if the username and password are set.

  Show description for 902e3f6
  TimothyBJacobs

  committed
  902e3f6

  Copy full SHA for 902e3f6

Commits on Dec 4, 2020

• App Passwords: Prevent conflicts when Basic Auth is already used by the site.

  Show description for 38361be
  TimothyBJacobs

  committed
  38361be

  Copy full SHA for 38361be

Commits on Nov 16, 2020

• App Passwords: Unify availability language.

  Show description for ba8de96
  TimothyBJacobs

  committed
  ba8de96

  Copy full SHA for ba8de96

Commits on Nov 15, 2020

• Build/Test Tools: Standardise the name, signature, and usage of the `wpSetUpBeforeClass()` method that's used in test classes.

  Show description for e843508
  johnbillion

  committed
  e843508

  Copy full SHA for e843508

Commits on Nov 9, 2020

• Tests: Use `assertSame()` in some newly introduced tests.

  Show description for 4eee0d2
  SergeyBiryukov

  committed
  4eee0d2

  Copy full SHA for 4eee0d2

Commits on Oct 8, 2020

• REST API: Introduce Application Passwords for API authentication.

  Show description for 1856d0f
  

  TimothyBlynJacobs

  authored and

  TimothyBlynJacobs

  committed
  1856d0f

  Copy full SHA for 1856d0f

Commits on Sep 2, 2020

• Tests: First pass at using `assertSame()` instead of `assertEquals()` in most of the unit tests.

  Show description for 164b22c
  SergeyBiryukov

  committed
  164b22c

  Copy full SHA for 164b22c

Commits on Jan 29, 2020

• Docs: Improve inline comments per the documentation standards.

  Show description for cfc3b57
  SergeyBiryukov

  committed
  cfc3b57

  Copy full SHA for cfc3b57

Commits on Nov 4, 2019

• Login and Registration: Simplify the test for `wp_signon()` added in [46640].

  Show description for 20165c2
  SergeyBiryukov

  committed
  20165c2

  Copy full SHA for 20165c2

Commits on Oct 14, 2019

• Administration: Ensure that admin referer nonce is valid.

  Show description for 778bf0c
  whyisjake

  committed
  778bf0c

  Copy full SHA for 778bf0c