AuthManager: Allow for flagging fields as "sensitive"
authorBrad Jorsch <bjorsch@wikimedia.org>
Thu, 18 Aug 2016 17:03:10 +0000 (13:03 -0400)
committerGergő Tisza <gtisza@wikimedia.org>
Thu, 18 Aug 2016 19:36:29 +0000 (19:36 +0000)
commit83c98e7cd8cc530cb87ec86a0f55e099eea64a46
tree1e255a78d3507e5648278e19858188d0cf20bdaa
parentd24af42ffff087a0824f6e9abefa33cab3e4e835
AuthManager: Allow for flagging fields as "sensitive"

This can allow AuthenticationRequests to flag certain fields as
sensitive, so e.g. the API can insist they be in the POST body rather
than in the query string.

Change-Id: I7b12aa4cd8f5a570f0df7213c0f9084b5a4d4de7
includes/api/ApiAuthManagerHelper.php
includes/auth/AuthenticationRequest.php
includes/auth/PasswordAuthenticationRequest.php
tests/phpunit/includes/auth/AuthenticationRequestTest.php
tests/phpunit/includes/auth/AuthenticationRequestTestCase.php