Introduce User::INVALID_TOKEN
authorBrad Jorsch <bjorsch@wikimedia.org>
Mon, 1 Feb 2016 21:59:27 +0000 (16:59 -0500)
committerAnomie <bjorsch@wikimedia.org>
Wed, 3 Feb 2016 21:45:45 +0000 (21:45 +0000)
commit30a9eae82177368b6246acc65b5331e81d4605ae
tree9fd0c7785e9c38978866aa8d91a0533309b82f36
parent2257fe42288cca06376e5caf45aa32da9d0216cf
Introduce User::INVALID_TOKEN

To avoid having to have SessionManager try to reset sessions on every
request, we set the user_token to a special value. When that value is
present, User::getToken() returns a different value every time (so
existing checks will fail) and User::setToken() refuses to alter it.

Bug: T124414
Change-Id: Ie4c84ce993e40a081288cf5a543f8ba99f98806a
includes/session/SessionManager.php
includes/user/User.php
tests/phpunit/includes/session/SessionManagerTest.php