Repository navigation
Immutable
release. Only release title and notes can be modified.
v8.2.0-BETA2
fabpot
Fabien Potencier
This tag was signed with the committer’s verified signature.
fabpot
Fabien Potencier
Changelog (v8.2.0-BETA1...v8.2.0-BETA2)
- bug #68144 Refuse DPoP-bound access tokens presented as bearer tokens (@nicolas-grekas)
- bug #68008 Count login attempts before checking their credentials (@nicolas-grekas)
- bug #68010 Limit login attempts of IPv6 clients by their /64 network (@nicolas-grekas)
- bug #68007 Keep the IP limit of login throttling on successful logins (@nicolas-grekas)
- bug #67991 Remove accents and invisible characters from login throttling keys (@nicolas-grekas)
- bug #67845 Fix the login throttling message announcing one minute too many (@lazerg)
- bug #67875 Reject X509 DNs whose identifier attribute appears more than once (@nicolas-grekas)
- bug #67876 Clear the pre-authenticated token when REMOTE_USER is empty (@nicolas-grekas)
- bug #67847 Split methods on commas in
#,#and#(@nicolas-grekas)
Contributors
nicolas-grekas and lazerg