symfony · fabpot · Nov 26, 2022 · Oct 29, 2022
diff --git a/UPGRADE-6.3.md b/UPGRADE-6.3.md
@@ -0,0 +1,7 @@
+UPGRADE FROM 6.2 to 6.3
+=======================
+
+SecurityBundle
+--------------
+
+ * Deprecate enabling bundle and not configuring it
@@ -1,6 +1,11 @@
 CHANGELOG
 =========

+6.3
+---
+
+ * Deprecate enabling bundle and not configuring it
+
 6.2
 ---


@@ -15,6 +15,7 @@
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface;
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\FirewallListenerFactoryInterface;
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\UserProvider\UserProviderFactoryInterface;
+use Symfony\Bundle\SecurityBundle\SecurityBundle;
 use Symfony\Component\Config\Definition\ConfigurationInterface;
 use Symfony\Component\Config\Definition\Exception\InvalidConfigurationException;
 use Symfony\Component\Config\FileLocator;
@@ -88,6 +89,9 @@ public function prepend(ContainerBuilder $container)
    public function load(array $configs, ContainerBuilder $container)
    {
        if (!array_filter($configs)) {
+            trigger_deprecation('symfony/security-bundle', '6.3', 'Enabling bundle "%s" and not configuring it is deprecated.', SecurityBundle::class);
+            // uncomment the following line in 7.0
+            // throw new InvalidArgumentException(sprintf('Enabling bundle "%s" and not configuring it is not allowed.', SecurityBundle::class));
            return;
        }


@@ -848,6 +848,22 @@ public function testConfigureCustomFirewallListener()
        $this->assertContains('custom_firewall_listener_id', $firewallListeners);
    }

+    /**
+     * @group legacy
+     */
+    public function testNothingDoneWithEmptyConfiguration()
+    {
+        $container = $this->getRawContainer();
+
+        $container->loadFromExtension('security');
+
+        $this->expectDeprecation('Since symfony/security-bundle 6.3: Enabling bundle "Symfony\Bundle\SecurityBundle\SecurityBundle" and not configuring it is deprecated.');
+
+        $container->compile();
+
+        $this->assertFalse($container->has('security.authorization_checker'));
+    }
+
    protected function getRawContainer()
    {
        $container = new ContainerBuilder();

@@ -1,2 +1,10 @@
 imports:
    - { resource: ./../config/framework.yml }
+
+security:
+    providers:
+        dummy:
+            memory: ~
+    firewalls:
+        dummy:
+            security: false