Dan Brown 88e6f93abf Prevented auto-login from direct email confirmation actions ... Was done for convenience but could potentially be exploited by an attacker using signing up via one of these routes, then forwarding an email confirmation to another user so they unknowingly utilise an account someone else controls. Tweaks the flow of confirming email, and the user invite flow. For #3050		2021-11-15 10:50:28 +00:00
..
AuthTest.php	Prevented auto-login from direct email confirmation actions	2021-11-15 10:50:28 +00:00
LdapTest.php	Laravel 8 shift squash & merge (#3029)	2021-10-30 21:29:59 +01:00
MfaConfigurationTest.php	Laravel 7.x Shift (#3011)	2021-10-26 22:04:18 +01:00
MfaVerificationTest.php	Applied latest styleci changes	2021-11-01 13:26:02 +00:00
OidcTest.php	Changed logout routes to POST instead of GET	2021-11-14 21:13:24 +00:00
Saml2Test.php	Changed logout routes to POST instead of GET	2021-11-14 21:13:24 +00:00
SocialAuthTest.php	Laravel 8 shift squash & merge (#3029)	2021-10-30 21:29:59 +01:00
UserInviteTest.php	Prevented auto-login from direct email confirmation actions	2021-11-15 10:50:28 +00:00