Changelog (v7.3.4...v7.3.5)

• bugsymfony/symfony#62037 Fix generating logout link with stateless csrf (@pierredup)

Contributors

Changelog (v7.3.4...v8.0.0-BETA1)

• featuresymfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
• featuresymfony/symfony#61949 [HttpFoundation] Deprecate HTTP method override for methods GET, HEAD, CONNECT and TRACE (@nicolas-grekas)
• featuresymfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
• featuresymfony/symfony#61948 [HttpFoundation] Deprecate Request::get() in favor of using properties ->attributes, query or request directly (@nicolas-grekas)
• featuresymfony/symfony#61789 [Security] deprecate extendingRememberMeDetails using legacy constructor signature (@xabbuh)
• featuresymfony/symfony#61760 [Security] remove the user FQCN from remember me cookies (@xabbuh)
• featuresymfony/symfony#61743 [Security] deprecate the FQCN properties ofPersistentToken andRememberMeDetails (@xabbuh)
• featuresymfony/symfony#61694 [Security] Add$tokenSource argument to#[IsCsrfTokenValid] to support reading tokens from the query string or headers (@webda2l)
• featuresymfony/symfony#61654 [Security] DeprecatePersistentToken::getClass() andRememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
• featuresymfony/symfony#61542 [Security] Allow subclassing#[IsGranted] (@nicolas-grekas)
• featuresymfony/symfony#61504 [SecurityHttp] Removes final keyword from IsGranted attribute (@crtl)
• featuresymfony/symfony#61359 [Security] Add$methods support to#[IsGranted] to restrict access by HTTP method (@santysisi)
• featuresymfony/symfony#61204 [Security] Support union type for#[CurrentUser] attribute (@VincentLanglet)
• featuresymfony/symfony#61187 Declare new parameters on interfaces and methods explicitly (@nicolas-grekas)
• featuresymfony/symfony#61183 [Security] Throw when passing an empty string as $userIdentifier and tighten AuthenticatorManager and OidcTokenHandler arguments (@nicolas-grekas)
• featuresymfony/symfony#61011 [Security] Remove deprecatedRememberMeToken::getSecret() (@ktherage)
• featuresymfony/symfony#60879 [Security] Remove callable firewall listeners support (@MatTheCat)
• featuresymfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)
• featuresymfony/symfony#60742 [Ldap][Security] Remove deprecatederaseCredentials() from (User|Token)Interface (@chalasr)
• featuresymfony/symfony#60697 Enforce return types on all components (@nicolas-grekas)
• featuresymfony/symfony#60639 Bump Symfony 8 to PHP >= 8.4 (@nicolas-grekas)

Contributors

Changelog (v7.3.4...v7.4.0-BETA1)

• featuresymfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
• featuresymfony/symfony#61949 [HttpFoundation] Deprecate HTTP method override for methods GET, HEAD, CONNECT and TRACE (@nicolas-grekas)
• featuresymfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
• featuresymfony/symfony#61948 [HttpFoundation] Deprecate Request::get() in favor of using properties ->attributes, query or request directly (@nicolas-grekas)
• featuresymfony/symfony#61789 [Security] deprecate extendingRememberMeDetails using legacy constructor signature (@xabbuh)
• featuresymfony/symfony#61743 [Security] deprecate the FQCN properties ofPersistentToken andRememberMeDetails (@xabbuh)
• featuresymfony/symfony#61694 [Security] Add$tokenSource argument to#[IsCsrfTokenValid] to support reading tokens from the query string or headers (@webda2l)
• featuresymfony/symfony#61654 [Security] DeprecatePersistentToken::getClass() andRememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
• featuresymfony/symfony#61542 [Security] Allow subclassing#[IsGranted] (@nicolas-grekas)
• featuresymfony/symfony#61504 [SecurityHttp] Removes final keyword from IsGranted attribute (@crtl)
• featuresymfony/symfony#61359 [Security] Add$methods support to#[IsGranted] to restrict access by HTTP method (@santysisi)
• featuresymfony/symfony#61204 [Security] Support union type for#[CurrentUser] attribute (@VincentLanglet)
• featuresymfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)

Contributors

Changelog (v7.3.3...v7.3.4)

• bugsymfony/symfony#61659 [Security] FixHttpUtils::createRequest() when the base request is forwarded (@MatTheCat)

Contributors

Changelog (v6.4.25...v6.4.26)

• bugsymfony/symfony#61659 [Security] FixHttpUtils::createRequest() when the base request is forwarded (@MatTheCat)

Contributors

Changelog (v7.3.2...v7.3.3)

• featuresymfony/symfony#61486 [Security] Ignore target route when exiting impersonation (@MatTheCat)

Contributors

Changelog (v6.4.24...v6.4.25)

• featuresymfony/symfony#61486 [Security] Ignore target route when exiting impersonation (@MatTheCat)

Contributors

Changelog (v7.3.1...v7.3.2)

• no significant changes

Changelog (v7.2.8...v7.2.9)

• no significant changes

Changelog (v6.4.23...v6.4.24)

• no significant changes