Revision history for Perl extension HTTP-Session2

1.02 2014-07-31T21:14:50Z

    - Better session id generation using /dev/urandom.

1.01 2014-07-28T11:43:10Z

    - Revert HMAC strategy...
      It breaks our code...

1.00 2014-07-28T04:09:47Z

    [INCOMPATIBLE CHANGE]
    - I changed HMAC strategy on ServerSide mode.
      Previous version uses
      
        hmac_hex(data: $session_id, key: $secret)

      New version is:

        hmac_hex(data: $secret, key: $session)

      This version is even secure. But, it's not a critical issue.

      I think this change won't break your code.

0.05 2014-03-18T18:52:37Z

    - use Cookie::Baker for generating cookie string for Plack response object.
      Because the document says HTTP::Session supports Cookie::Baker's expiration format like "-1d".
      But it's not supported in previous version!!
      https://github.com/tokuhirom/HTTP-Session2/pull/1
      (magai)

0.04 2013-11-01T01:00:09Z

    - Revert validate_empty_session flag introduced at 0.03.
      (tokuhirom)

0.03 2013-10-31T01:19:19Z

    - Validate empty session option for P3P cookies.
      (tokuhirom)
    - Non callback style storage settings.
      (tokuhirom)

0.02 2013-10-30T00:16:10Z

    - Documentation fix

0.01 2013-10-28T03:18:35Z

    - original version