Damyon Wiese 6dfe428363 MDL-63183 auth: Login protection ... CSRF protection for the login form. The authenticate_user_login function was extended to validate the token (in \core\session\manager) but by default it does not perform the extra validation. Existing uses of this function from auth plugins and features like "change password" will continue to work without changes. New config value $CFG->disablelogintoken can bypass this check.		2018-11-07 00:14:48 +01:00
..
form	MDL-61423 authentication: Add digital minor verification upon signup	2018-03-08 15:01:25 +08:00
output	MDL-63183 auth: Login protection	2018-11-07 00:14:48 +01:00
privacy	MDL-62253 core_auth: Implement privacy API	2018-05-01 09:14:58 +08:00
digital_consent.php	MDL-61658 user: Fix parsing of the agedigitalconsentmap setting	2018-03-21 18:17:47 +01:00
external.php	MDL-63742 auth: New WS core_auth_resend_confirmation_email	2018-10-29 11:04:02 +01:00