Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Commit afea80e

Browse filesBrowse files
nicolas-grekasnicolas-grekas
committed
Merge branch '5.4' into 6.0
* 5.4: [Security] make TokenInterface::getUser() nullable to tell about unauthenticated tokens [Messenger] fix compat with Serializer v6
2 parents dfccd79 + 695a83b commit afea80e
Copy full SHA for afea80e

File tree

Expand file treeCollapse file tree

15 files changed

+65
-36
lines changed
Filter options
Expand file treeCollapse file tree

15 files changed

+65
-36
lines changed

‎UPGRADE-5.4.md

Copy file name to clipboardExpand all lines: UPGRADE-5.4.md
+2-2Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -112,8 +112,8 @@ Security
112112
behavior when using `enable_authenticator_manager: true`)
113113
* Deprecate not setting the `$exceptionOnNoToken` argument of `AccessListener` to `false`
114114
(this is the default behavior when using `enable_authenticator_manager: true`)
115-
* Deprecate `TokenInterface:isAuthenticated()` and `setAuthenticated()` methods without replacement.
116-
Security tokens won't have an "authenticated" flag anymore, so they will always be considered authenticated
115+
* Deprecate `TokenInterface:isAuthenticated()` and `setAuthenticated()` methods,
116+
return `null` from `getUser()` instead when a token is not authenticated
117117
* Deprecate `DeauthenticatedEvent`, use `TokenDeauthenticatedEvent` instead
118118
* Deprecate `CookieClearingLogoutHandler`, `SessionLogoutHandler` and `CsrfTokenClearingLogoutHandler`.
119119
Use `CookieClearingLogoutListener`, `SessionLogoutListener` and `CsrfTokenClearingLogoutListener` instead

‎UPGRADE-6.0.md

Copy file name to clipboardExpand all lines: UPGRADE-6.0.md
+2-2Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -365,8 +365,8 @@ Security
365365
`UsernamePasswordFormAuthenticationListener`, `UsernamePasswordJsonAuthenticationListener` and `X509AuthenticationListener`
366366
from security-http, use the new authenticator system instead
367367
* Remove the Guard component, use the new authenticator system instead
368-
* Remove `TokenInterface:isAuthenticated()` and `setAuthenticated()` methods without replacement.
369-
Security tokens won't have an "authenticated" flag anymore, so they will always be considered authenticated
368+
* Remove `TokenInterface:isAuthenticated()` and `setAuthenticated()`,
369+
return `null` from `getUser()` instead when a token is not authenticated
370370
* Remove `DeauthenticatedEvent`, use `TokenDeauthenticatedEvent` instead
371371
* Remove `CookieClearingLogoutHandler`, `SessionLogoutHandler` and `CsrfTokenClearingLogoutHandler`.
372372
Use `CookieClearingLogoutListener`, `SessionLogoutListener` and `CsrfTokenClearingLogoutListener` instead

‎src/Symfony/Bridge/Monolog/Processor/AbstractTokenProcessor.php

Copy file name to clipboardExpand all lines: src/Symfony/Bridge/Monolog/Processor/AbstractTokenProcessor.php
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ public function __invoke(array $record): array
4242

4343
if (null !== $token = $this->getToken()) {
4444
$record['extra'][$this->getKey()] = [
45-
'authenticated' => method_exists($token, 'isAuthenticated') ? $token->isAuthenticated(false) : true, // @deprecated since Symfony 5.4, always true in 6.0
45+
'authenticated' => method_exists($token, 'isAuthenticated') ? $token->isAuthenticated(false) : (bool) $token->getUser(),
4646
'roles' => $token->getRoleNames(),
4747
];
4848

‎src/Symfony/Bridge/Twig/AppVariable.php

Copy file name to clipboardExpand all lines: src/Symfony/Bridge/Twig/AppVariable.php
+2-1Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@
1616
use Symfony\Component\HttpFoundation\Session\Session;
1717
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
1818
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
19+
use Symfony\Component\Security\Core\User\UserInterface;
1920

2021
/**
2122
* Exposes some Symfony parameters and services as an "app" global variable.
@@ -68,7 +69,7 @@ public function getToken(): ?TokenInterface
6869
*
6970
* @see TokenInterface::getUser()
7071
*/
71-
public function getUser(): ?object
72+
public function getUser(): ?UserInterface
7273
{
7374
if (null === $tokenStorage = $this->tokenStorage) {
7475
throw new \RuntimeException('The "app.user" variable is not available.');

‎src/Symfony/Bundle/SecurityBundle/DataCollector/SecurityDataCollector.php

Copy file name to clipboardExpand all lines: src/Symfony/Bundle/SecurityBundle/DataCollector/SecurityDataCollector.php
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ public function collect(Request $request, Response $response, \Throwable $except
119119

120120
$this->data = [
121121
'enabled' => true,
122-
'authenticated' => method_exists($token, 'isAuthenticated') ? $token->isAuthenticated(false) : true,
122+
'authenticated' => method_exists($token, 'isAuthenticated') ? $token->isAuthenticated(false) : (bool) $token->getUser(),
123123
'impersonated' => null !== $impersonatorUser,
124124
'impersonator_user' => $impersonatorUser,
125125
'impersonation_exit_path' => null,

‎src/Symfony/Component/Messenger/Transport/Serialization/Normalizer/FlattenExceptionNormalizer.php

Copy file name to clipboardExpand all lines: src/Symfony/Component/Messenger/Transport/Serialization/Normalizer/FlattenExceptionNormalizer.php
+2-2Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ final class FlattenExceptionNormalizer implements DenormalizerInterface, Context
2929
/**
3030
* {@inheritdoc}
3131
*/
32-
public function normalize(mixed $object, string $format = null, array $context = []): array|string|int|float|bool|\ArrayObject|null
32+
public function normalize(mixed $object, string $format = null, array $context = []): array
3333
{
3434
$normalized = [
3535
'message' => $object->getMessage(),
@@ -59,7 +59,7 @@ public function supportsNormalization(mixed $data, string $format = null, array
5959
/**
6060
* {@inheritdoc}
6161
*/
62-
public function denormalize(mixed $data, string $type, string $format = null, array $context = []): mixed
62+
public function denormalize(mixed $data, string $type, string $format = null, array $context = []): FlattenException
6363
{
6464
$object = new FlattenException();
6565

‎src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php

Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php
+3-12Lines changed: 3 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,6 @@
1111

1212
namespace Symfony\Component\Security\Core\Authentication;
1313

14-
use Symfony\Component\Security\Core\Authentication\Token\NullToken;
1514
use Symfony\Component\Security\Core\Authentication\Token\RememberMeToken;
1615
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
1716

@@ -24,30 +23,22 @@ class AuthenticationTrustResolver implements AuthenticationTrustResolverInterfac
2423
{
2524
public function isAuthenticated(TokenInterface $token = null): bool
2625
{
27-
return null !== $token && !$token instanceof NullToken;
26+
return $token && $token->getUser();
2827
}
2928

3029
/**
3130
* {@inheritdoc}
3231
*/
3332
public function isRememberMe(TokenInterface $token = null)
3433
{
35-
if (null === $token) {
36-
return false;
37-
}
38-
39-
return $token instanceof RememberMeToken;
34+
return $token && $token instanceof RememberMeToken;
4035
}
4136

4237
/**
4338
* {@inheritdoc}
4439
*/
4540
public function isFullFledged(TokenInterface $token = null)
4641
{
47-
if (null === $token || $token instanceof NullToken) {
48-
return false;
49-
}
50-
51-
return !$this->isRememberMe($token);
42+
return $this->isAuthenticated($token) && !$this->isRememberMe($token);
5243
}
5344
}

‎src/Symfony/Component/Security/Core/Authentication/Token/NullToken.php

Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Core/Authentication/Token/NullToken.php
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ public function getRoleNames(): array
3030

3131
public function getUser()
3232
{
33-
return '';
33+
return null;
3434
}
3535

3636
public function setUser(UserInterface $user)

‎src/Symfony/Component/Security/Core/Authentication/Token/TokenInterface.php

Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Core/Authentication/Token/TokenInterface.php
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ public function getRoleNames(): array;
4040
/**
4141
* Returns a user representation.
4242
*
43-
* @return UserInterface
43+
* @return UserInterface|null
4444
*
4545
* @see AbstractToken::setUser()
4646
*/

‎src/Symfony/Component/Security/Core/Authorization/AuthorizationChecker.php

Copy file name to clipboardExpand all lines: src/Symfony/Component/Security/Core/Authorization/AuthorizationChecker.php
+6-2Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ class AuthorizationChecker implements AuthorizationCheckerInterface
3232

3333
public function __construct(TokenStorageInterface $tokenStorage, AccessDecisionManagerInterface $accessDecisionManager, bool $exceptionOnNoToken = false)
3434
{
35-
if (false !== $exceptionOnNoToken) {
35+
if ($exceptionOnNoToken) {
3636
throw new \LogicException('Argument $exceptionOnNoToken of "%s()" must be set to "false".', __METHOD__);
3737
}
3838

@@ -48,7 +48,11 @@ public function __construct(TokenStorageInterface $tokenStorage, AccessDecisionM
4848
*/
4949
final public function isGranted(mixed $attribute, mixed $subject = null): bool
5050
{
51-
$token = $this->tokenStorage->getToken() ?? new NullToken();
51+
$token = $this->tokenStorage->getToken();
52+
53+
if (!$token || !$token->getUser()) {
54+
$token = new NullToken();
55+
}
5256

5357
return $this->accessDecisionManager->decide($token, [$attribute], $subject);
5458
}

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.