85 Commits (6f0f17355f83f2ce796c7bb6b9d4b9bd9ea408e9)

Author SHA1 Message Date
Pádraic Brady 81b86acc53 Merge branch 'master' of github.com:composer/composer into tls-config
Conflicts:
	src/Composer/Util/RemoteFilesystem.php
10 years ago
Pádraic Brady 8abff794cd Fix CN matching to use correct host (should almost eliminate TLS retries where wildcard CNs are used) 10 years ago
Jordi Boggiano 1851c29dd3 Update code to work with #2766 10 years ago
Jordi Boggiano 9db2a537e5 Merge remote-tracking branch 'cs278/github-otp-support' 10 years ago
Jordi Boggiano 28bb781324 Capture response bodies in exceptions when http requests fail 10 years ago
Pádraic Brady 2972ec3d86 Show warning when we retry a TLS connection for downloads 10 years ago
Pádraic Brady c9c6849df0 Add Common Name (CN) matching checks and TLS connection retry (by default).
For example, the communicated host will be github.com, but the CN is *.github.com. Also not matching api.github.com.
The logic detects an initial TLS CN-mismatch error, and parses the correct CN from the error, then checks if the CN and URL have same host before retrying.
10 years ago
Pádraic Brady a2bf14e381 Make disableTls a core RemoteFilesystem option - per method invites human error 10 years ago
Pádraic Brady 49590af656 $originUrl passed to RemoteFilesystem is actually a HOST string already (so far!) 11 years ago
Pádraic Brady 0a8180674e Adding some HTTPS check to diagnose command (stash) 11 years ago
Pádraic Brady 2a552df315 Fix openssl_x509_parse() function namespace issue under PHP 5.3.3 11 years ago
Pádraic Brady 2648064e5a Some typos/corrections 11 years ago
Pádraic Brady 1e1e713329 Added test for RemoteFilesystem TLS options setup 11 years ago
Pádraic Brady fa54b7054c Put CN matching above the final recursive option merge 11 years ago
Pádraic Brady 9412bb427a Add CN_match and SNI_server_name setup to RemoteFilesystem 11 years ago
Pádraic Brady ca4b4696b0 Added Exceptions, errors and info messages for self-update command and TLS defaults to RemoteFilesystem 11 years ago
Chris Smith 3f6a62099d Add an option which causes reauth attempts to be bypassed 11 years ago
Chris Smith 20dac3e836 Remove GitHub OTP code from RFS class 11 years ago
Chris Smith 9a0f4392da Trim whitepsace from each argument 11 years ago
Chris Smith 360df90ba5 Add GitHub OTP to request headers 11 years ago
Chris Smith 3f53acc9af Test if the 401 was caused by 2FA and ask for OTP if appropriate 11 years ago
Chris Smith 23d35204cd Bail out of the normal 401 handling routine when the origin is GitHub 11 years ago
Jordi Boggiano cc7920000c Ask for auth if we get a 403 and did not have auth yet, fixes #2464 11 years ago
Nils Adermann f0b45099c1 Correct authorship info for files I edited 11 years ago
Nils Adermann 9402a9fb3c Plugins receive composer and io objects on construction already 11 years ago
Jordi Boggiano e99b327342 Clarify that composer.json is being read and not downloaded, refs #2096 11 years ago
Jan Prieser cc1e10e8ae allow FileDownloader to use username:password@ info when downloading through https? 11 years ago
Jordi Boggiano 8d0b7f278e CS fixes 11 years ago
Pavel Savinov 831bd844bd Almost PHPDoc problems fixed 11 years ago
Jordi Boggiano 1debe22412 Add HTTPS_PROXY_REQUEST_FULLURI to disable the request_fulluri only for https requests, fixes #1946, fixes #1839 11 years ago
Stephan Hochdörfer 4d92626ef0 Fix for recursion problem with wrong http basic auth credentials. First
I got an "array_replace_recursive(): Argument #2 is not an array" error
and after fixing that it resulted in another error saying "Undefined
variable: result".
11 years ago
Jordi Boggiano 29fcca8595 Avoid weird recursion pattern by retrying after the first request is complete 11 years ago
Jordi Boggiano 4d52900dff Bypass failure if the server is just asking for credentials, fixes #1845 11 years ago
Jordi Boggiano e78a21015b Dont try to gzip decode empty responses, refs #1846 11 years ago
Jordi Boggiano 81f1451118 Clarify exception message when an empty response is returned 11 years ago
Jordi Boggiano a9db844a41 Merge remote-tracking branch 'bitExpert/feature/repo_basic_auth' 11 years ago
Jordi Boggiano 3b97e2e260 Add support for new verbosity levels, and initial debug output 11 years ago
Jordi Boggiano 842155d69e Use original URL for exceptions, not the one containing authorization, fixes #1722 11 years ago
Stephan Hochdörfer df897b42c2 Removed dead statement. 11 years ago
Stephan Hochdörfer 906563451e Reverted the last changes. Changed logic in callbackGet() method to
respect the 401 handling also if STREAM_NOTIFY_FAILURE fires as on my
local machine the handling of STREAM_NOTIFY_AUTH_REQUIRED never got
executed.
11 years ago
Stephan Hochdörfer dcdcf57f3f Moved 401 handling from ComposerRepository to RemoteFilesystem and
displaying the url when asking for the credentials.
11 years ago
Stephan Hochdörfer f2afbbac2f Extended the fetchFile() method of the ComposerRepository class to be
able to deal with http basic auth. In case the remote resource responds
with a 401 ask the user for access credentials and retry quering the
resource again.
11 years ago
Jasper N. Brouwer 4347cb7a55 Fixed the "access_token query param" (5b1f314) fix 12 years ago
Jordi Boggiano 5b1f3145c2 Update the way github authorization is handled, fixes #1632
Since api.github.com redirects to s3 for downloads and s3 does not like Authorization
headers, we have to rely on the access_token query param. Otherwise php follows redirects
but still sends the Authorization header to all following requests.
12 years ago
Jordi Boggiano b8da471f9a Clarify transport exception for 403s, fixes #1416 12 years ago
Igor Wiedler 4959c2bdc6 Replace references of a11n with a12n where appropriate
Authorization => Authentication.
12 years ago
Pascal Borreli 83fd3967f0 Fixed PHPDoc 12 years ago
Jordi Boggiano 43c21a736c Send headers as array instead of one big string 12 years ago
Jordi Boggiano 73aea05907 Send source instead of @package_version@ for the composer version in UA 12 years ago
Jordi Boggiano 7d4857fc5b Catch all 4**/5** responses 12 years ago