Skip to content

[Security] pass the current token to the checkPostAuth() method of user checkers #57773

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 25, 2024

Conversation

xabbuh
Copy link
Member

@xabbuh xabbuh commented Jul 19, 2024

Q A
Branch? 7.2
Bug fix? no
New feature? yes
Deprecations? no
Issues Fix #50650
License MIT

@chalasr
Copy link
Member

chalasr commented Jul 19, 2024

👍 some testcase would be nice to have though

@xabbuh
Copy link
Member Author

xabbuh commented Jul 19, 2024

tests added

@OskarStark OskarStark changed the title [Security] pass the current token to the checkPostAuth() method of user checkers [Security] pass the current token to the checkPostAuth() method of user checkers Jul 22, 2024
@fabpot
Copy link
Member

fabpot commented Jul 25, 2024

Thank you @xabbuh.

@fabpot fabpot merged commit 6c7a6ff into symfony:7.2 Jul 25, 2024
18 checks passed
@xabbuh xabbuh deleted the issue-50650 branch July 25, 2024 07:02
@fabpot fabpot mentioned this pull request Oct 27, 2024
nicolas-grekas added a commit that referenced this pull request Jul 22, 2025
…ce::checkPostAuth() (nicolas-grekas)

This PR was merged into the 7.2 branch.

Discussion
----------

[Security] Fix added $token argument to UserCheckerInterface::checkPostAuth()

| Q             | A
| ------------- | ---
| Branch?       | 7.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Issues        | -
| License       | MIT

An added argument must be optional and must be declared using ``@param``, which will allow spotting all places that have to be updated in cascade. This PR fixes all that. Not sure how we messed up so badly in #57773 😅

Commits
-------

c819110 [Security] Fix added $token argument to UserCheckerInterface::checkPostAuth()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[security] Provide authentification token when using an user checker
6 participants
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy