Adminator
5d94572569
Vorbereitung für pod-unabhängige Sessions (k8s-Ziel). Ändert am Live-System NICHTS: AUTH_BACKEND='session' bleibt Default, die neuen Libs sind noch nirgends verdrahtet. - composer eingeführt: firebase/php-jwt ^6.11 + predis/predis ^2.4 (pure PHP, keine Redis-Extension nötig → läuft auf XAMPP wie im Prod-Image). vendor/ committed (kein Composer auf dem Server). - Jwt.php: HS256-Access-Token (issue/verify), decode() IMMER mit explizitem Algorithmus (mitigiert Algorithmus-Confusion). 8/8 Tests grün. - SessionStore.php: predis-gestützter Session/Refresh-Store (sess:<sid>, Sliding-TTL, revoke=DEL) — die widerrufbare Session hinter dem kurzen JWT. - app.php: vendor/autoload (guarded), Konstanten AUTH_BACKEND (Default session), REDIS_URL, JWT_TTL, JWT_REFRESH_TTL. JWT_SECRET bewusst ohne Default. - docker-compose.dev.yml: Redis (+ redis-commander UI) für lokale Dev-Parität. - .env.example um Auth-Block ergänzt. Nächste Phasen: $_SESSION-Zugriffe (293) durch Session:: kanalisieren → Backend-Umschalter in Session.php → doppelgleisiger Cutover → Reporting auf student_id-FK ziehen. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
150 lines
5.1 KiB
JSON
150 lines
5.1 KiB
JSON
{
|
|
"_readme": [
|
|
"This file locks the dependencies of your project to a known state",
|
|
"Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
|
|
"This file is @generated automatically"
|
|
],
|
|
"content-hash": "2d5bd664b477984e9dd447a511f9360d",
|
|
"packages": [
|
|
{
|
|
"name": "firebase/php-jwt",
|
|
"version": "v6.11.1",
|
|
"source": {
|
|
"type": "git",
|
|
"url": "https://github.com/googleapis/php-jwt.git",
|
|
"reference": "d1e91ecf8c598d073d0995afa8cd5c75c6e19e66"
|
|
},
|
|
"dist": {
|
|
"type": "zip",
|
|
"url": "https://api.github.com/repos/googleapis/php-jwt/zipball/d1e91ecf8c598d073d0995afa8cd5c75c6e19e66",
|
|
"reference": "d1e91ecf8c598d073d0995afa8cd5c75c6e19e66",
|
|
"shasum": ""
|
|
},
|
|
"require": {
|
|
"php": "^8.0"
|
|
},
|
|
"require-dev": {
|
|
"guzzlehttp/guzzle": "^7.4",
|
|
"phpspec/prophecy-phpunit": "^2.0",
|
|
"phpunit/phpunit": "^9.5",
|
|
"psr/cache": "^2.0||^3.0",
|
|
"psr/http-client": "^1.0",
|
|
"psr/http-factory": "^1.0"
|
|
},
|
|
"suggest": {
|
|
"ext-sodium": "Support EdDSA (Ed25519) signatures",
|
|
"paragonie/sodium_compat": "Support EdDSA (Ed25519) signatures when libsodium is not present"
|
|
},
|
|
"type": "library",
|
|
"autoload": {
|
|
"psr-4": {
|
|
"Firebase\\JWT\\": "src"
|
|
}
|
|
},
|
|
"notification-url": "https://packagist.org/downloads/",
|
|
"license": [
|
|
"BSD-3-Clause"
|
|
],
|
|
"authors": [
|
|
{
|
|
"name": "Neuman Vong",
|
|
"email": "neuman+pear@twilio.com",
|
|
"role": "Developer"
|
|
},
|
|
{
|
|
"name": "Anant Narayanan",
|
|
"email": "anant@php.net",
|
|
"role": "Developer"
|
|
}
|
|
],
|
|
"description": "A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.",
|
|
"homepage": "https://github.com/firebase/php-jwt",
|
|
"keywords": [
|
|
"jwt",
|
|
"php"
|
|
],
|
|
"support": {
|
|
"issues": "https://github.com/googleapis/php-jwt/issues",
|
|
"source": "https://github.com/googleapis/php-jwt/tree/v6.11.1"
|
|
},
|
|
"time": "2025-04-09T20:32:01+00:00"
|
|
},
|
|
{
|
|
"name": "predis/predis",
|
|
"version": "v2.4.1",
|
|
"source": {
|
|
"type": "git",
|
|
"url": "https://github.com/predis/predis.git",
|
|
"reference": "07105e050622ed80bd60808367ced9e379f31530"
|
|
},
|
|
"dist": {
|
|
"type": "zip",
|
|
"url": "https://api.github.com/repos/predis/predis/zipball/07105e050622ed80bd60808367ced9e379f31530",
|
|
"reference": "07105e050622ed80bd60808367ced9e379f31530",
|
|
"shasum": ""
|
|
},
|
|
"require": {
|
|
"php": "^7.2 || ^8.0"
|
|
},
|
|
"require-dev": {
|
|
"friendsofphp/php-cs-fixer": "^3.3",
|
|
"phpstan/phpstan": "^1.9",
|
|
"phpunit/phpcov": "^6.0 || ^8.0",
|
|
"phpunit/phpunit": "^8.0 || ^9.4"
|
|
},
|
|
"suggest": {
|
|
"ext-relay": "Faster connection with in-memory caching (>=0.6.2)"
|
|
},
|
|
"type": "library",
|
|
"autoload": {
|
|
"psr-4": {
|
|
"Predis\\": "src/"
|
|
}
|
|
},
|
|
"notification-url": "https://packagist.org/downloads/",
|
|
"license": [
|
|
"MIT"
|
|
],
|
|
"authors": [
|
|
{
|
|
"name": "Till Krüss",
|
|
"homepage": "https://till.im",
|
|
"role": "Maintainer"
|
|
}
|
|
],
|
|
"description": "A flexible and feature-complete Redis/Valkey client for PHP.",
|
|
"homepage": "http://github.com/predis/predis",
|
|
"keywords": [
|
|
"nosql",
|
|
"predis",
|
|
"redis"
|
|
],
|
|
"support": {
|
|
"issues": "https://github.com/predis/predis/issues",
|
|
"source": "https://github.com/predis/predis/tree/v2.4.1"
|
|
},
|
|
"funding": [
|
|
{
|
|
"url": "https://github.com/sponsors/tillkruss",
|
|
"type": "github"
|
|
}
|
|
],
|
|
"time": "2025-11-12T18:00:11+00:00"
|
|
}
|
|
],
|
|
"packages-dev": [],
|
|
"aliases": [],
|
|
"minimum-stability": "stable",
|
|
"stability-flags": {},
|
|
"prefer-stable": false,
|
|
"prefer-lowest": false,
|
|
"platform": {
|
|
"php": ">=8.0"
|
|
},
|
|
"platform-dev": {},
|
|
"platform-overrides": {
|
|
"php": "8.0.2"
|
|
},
|
|
"plugin-api-version": "2.9.0"
|
|
}
|