Checking in changes prior to tagging of version 0.26. Changelog diff is:

[catagits/Catalyst-Plugin-Session.git] / Changes

diff --git a/Changes b/Changes
index b668166..be00c06 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,5 +1,26 @@
 Revision history for Perl extension Catalyst::Plugin::Session
 
+0.26 2009-08-19
+        - Remove Test::MockObject from the test suite as it is full of fail.
+
+0.25 2009-07-08
+        - Add the a change_session_id method which can be called after
+          authentication to change the user's session cookie whilst preserving
+          their session data. This can be used to provide protection from
+          Session Fixation attacks. (kmx)
+
+0.24 2009-06-23
+        - Be more paranoid about getting values of $c->req to avoid issues
+          with old Test::WWW::Mechanize::Catalyst.
+        - Check we have a modern version of TWMC before doing the tests which
+          need it.
+
+0.23 2009-06-16
+        - Add the verify_user_agent config parameter (kmx)
+        - Add a test case to prove that logging in with a session cookie still 
+          causes a new cookie to be issued for you, proving that the code is
+          not vulnerable to a session fixation attack. (t0m)
+
 0.22 2009-05-13
         - INSANE HACK to ensure B::Hooks::EndOfScope inlines us a new method right now
           in Catalyst::Plugin::Session::Test::Store for Catalyst 5.80004 compatibility.