Releases: cakephp/authorization
Releases · cakephp/authorization
CakePHP Authorization 1.3.1
Fixes
- Generated redirect URLs no longer contain the host or protocol. You should validate URLs before redirecting or use the method in authentication plugin.
- Base paths are included in URLs generated by RedirectHandler.
CakePHP Authorization 2.0.0
- Compatible with CakePHP 4.0
1.3.0
Improvements
Removed deprecations.
This plugin is now CakePHP 3.6+.
Authorization 1.2.0
Authorization 1.1.0
New Features
- The argument to
authorize()
can now be a scalar value. This enables
the creation of resolvers that don't require an object. - Policies can now return
Authorization\Policy\Result
instead of just
a boolean. This new object allows an additional reason code to be
supplied for when authorization is denied. Authorization\Exception\ForbiddenException::getResult()
was added.Authorization\Policy\RequestPolicyInterface
was added. It defines
an interface for doing access checks based on the request object.
1.0.0
1.0.0-beta8
- Application classes must now implement the
Authorization\AuthorizationProviderInterface
Authorization 1.0.0-beta6
New Features
- Improved documentation.
Authorization 1.0.0-beta7
New Features
Authorization\Middleware\RequestAuthorizationMiddleware
has been added. This middleware allows you to check authorization from aRequestPolicy
that can check authorization based on the current request URL and identity.- Improved documentation and guides.
1.0.0-beta2
This is another beta release.
Since the first beta:
- support for skipping authorization has been added,
- support for handling unauthorized requests has been added,
- docs have been improved.