Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork9.7k
[HttpKernel] Fix handling ofMapRequest* attributes#50125
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Uh oh!
There was an error while loading.Please reload this page.
Conversation
nicolas-grekas commentedApr 23, 2023
| Q | A |
|---|---|
| Branch? | 6.3 |
| Bug fix? | yes |
| New feature? | no |
| Deprecations? | no |
| Tickets | Fix#50120 |
| License | MIT |
| Doc PR | - |
artyuum commentedApr 23, 2023
@nicolas-grekas I cloned your repo, checked out your branch and used the
StacktraceDo you have the same error? |
nicolas-grekas commentedApr 23, 2023
Yes, I do. This should now be fixed. Can you please try again? |
artyuum commentedApr 23, 2023
@nicolas-grekas it works. I commented on the issue. |
Koc commentedApr 23, 2023
We should be careful with usage of the payload as Subject from Controller Arguments in |
nicolas-grekas left a comment• edited
Loading Uh oh!
There was an error while loading.Please reload this page.
edited
Uh oh!
There was an error while loading.Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
We should be careful with usage of the payload as Subject from Controller Arguments in [#IsGranted Attribute
Accessing unserialized payloads in#[IsGranted] directly contradicts the expectations described in#50120: the expectation there is that a payload shouldn't be parsed if we can rule out access to some route before said parsing happens, which makes sense to me.
One way to solve this would be to allow registering an IsGranted attribute for late evaluation, aka after other controller argument listeners. There might be others.
Let's merge this PR and solve late the case of accessing the parsed subject from IsGranted?
Uh oh!
There was an error while loading.Please reload this page.
791c5f3 to6a82314Comparenicolas-grekas commentedApr 24, 2023
I updated the way traceable resolvers and serializers are wired so that we don't rely on service decoration, but use standard decoration instead. This preserves the definition of the original decorated service, so that we can e.g. use several tags on them without conflicts. |
nicolas-grekas commentedApr 26, 2023
PR rebased on top of#50158 to split the concern of decoration apart. |
nicolas-grekas commentedMay 2, 2023
PR rebased and ready. |
chalasr commentedMay 2, 2023
Thanks@nicolas-grekas. |