Allow for time-limited tokens
authorBrad Jorsch <bjorsch@wikimedia.org>
Tue, 26 Aug 2014 18:12:32 +0000 (14:12 -0400)
committerBrad Jorsch <bjorsch@wikimedia.org>
Sat, 18 Oct 2014 00:07:38 +0000 (17:07 -0700)
commitb1e4006b440185c7e8304c03946bb0155b0edc83
tree041288d599aa7245498aa67cc6ed5914a693b1ab
parent0128cea1496a68b4fbed206e257d6da43a5391ab
Allow for time-limited tokens

Tokens returned from User::getEditToken will now include an encoded
timestamp (and therefore will be up to 16 bytes longer).

User::matchEditToken and User::matchEditTokenNoSuffix are gaining a
"maxage" parameter: when specified, only tokens with an encoded timestamp
within $maxage seconds will be accepted.

Change-Id: Ic4cf148cc1fa9d0561aac0bd2d68a09c7851896d
RELEASE-NOTES-1.25
includes/User.php
tests/phpunit/includes/api/ApiTestCase.php