Pony.fm/app/Http/Middleware
Adam Lavin 991f8df661 Security: Fix auth.outh2 generating a user session
If you are logged out of Pony.fm, made a request to an endpoint using this middleware in the browser with an access token with the appropriate scope, then went back to Pony.fm, you'd be logged in as the owner of the access token.
2016-01-01 20:55:00 +00:00
..
Authenticate.php Licensed Pony.fm under the GNU Affero General Public License (AGPL). 2015-10-24 22:17:45 -07:00
AuthenticateOAuth.php Security: Fix auth.outh2 generating a user session 2016-01-01 20:55:00 +00:00
Authorize.php #2, #20: Laid the groundwork for an admin area. Includes the addition of Laravel's authorization system. 2015-11-23 21:19:23 -08:00
DisabledAccountCheck.php #29: This works because the only disabled accounts right now are merged ones. 2015-12-29 13:32:14 -08:00
EncryptCookies.php Licensed Pony.fm under the GNU Affero General Public License (AGPL). 2015-10-24 22:17:45 -07:00
JsonExceptions.php #8: Implemented the track upload API. 2015-12-24 04:14:55 -08:00
Profiler.php #8: Implemented the track upload API. 2015-12-24 04:14:55 -08:00
RedirectIfAuthenticated.php Licensed Pony.fm under the GNU Affero General Public License (AGPL). 2015-10-24 22:17:45 -07:00
VerifyCsrfToken.php #8: Implemented the track upload API. 2015-12-24 04:14:55 -08:00