The driver/authenticator should be updated instead to me - it should throw an AuthenticationException

This does not feel right. DriverException could mean virtually anything. The database could be down, the table structure could be broken, … Those are hard errors that I would expect to result in an HTTP 500 error.

Should we narrow to some specific error codes then?

That's indeed a good point. What about moving the try catch to that particular statement in SwitchUserListener instead?

That's indeed a good point. What about moving the try catch to that particular statement in SwitchUserListener instead?

That's what I did in the first place, until Nicolas' comment.

That's what I did in the first place, until Nicolas' comment.

I confirm: the issue is in the Doctrine bridge, not in the SwitchUserListener (which doesn't know anything bout databases.)

Hmm, I would prefer to change this inner catch() to catch all exceptions:

Putting this in the EntityUserProvider is too generic, as @derrabus pointed out. The doctrine error can be anything and we only want to ignore these errors for the fake username.

The first loadUserByUsername call does only catch authentication exceptions. Thus any db error other than invalid username type is already catched by the first call. The second call thus only fail when the username is of the wrong type afaics.

The first loadUserByUsername call does only catch authentication exceptions. Thus any db error other than invalid username type is already catched by the first call. The second call thus only fail when the username is of the wrong type afaics.

OK, good argument! Let's revert to your initial proposal then @fancyweb, and sorry for the confusion :)

I reverted to the initial change (on 4.4). Sorry for the massive ping 😅

Thank you @fancyweb.