v7.2.1

Changelog (v7.2.0...v7.2.1)

• no significant changes

v7.2.0

Changelog (v7.2.0-RC1...v7.2.0)

• no significant changes

v7.1.8

Changelog (v7.1.7...v7.1.8)

• security symfony/symfony#cve-2024-51996 [Security] Check owner of persisted remember-me cookie (@jderusse)

v6.4.15

Changelog (v6.4.14...v6.4.15)

• security symfony/symfony#cve-2024-51996 [Security] Check owner of persisted remember-me cookie (@jderusse)

v5.4.47

Changelog (v5.4.46...v5.4.47)

• security symfony/symfony#cve-2024-51996 [Security] Check owner of persisted remember-me cookie (@jderusse)

v7.2.0-BETA2

Changelog (v7.2.0-BETA1...v7.2.0-BETA2)

• bug symfony/symfony#58754 [Security] Store original token in token storage when implicitly exiting impersonation (@wouterj)

v7.1.7

Changelog (v7.1.6...v7.1.7)

• bug symfony/symfony#58754 [Security] Store original token in token storage when implicitly exiting impersonation (@wouterj)

v6.4.14

Changelog (v6.4.13...v6.4.14)

• bug symfony/symfony#58754 [Security] Store original token in token storage when implicitly exiting impersonation (@wouterj)

v5.4.46

Changelog (v5.4.45...v5.4.46)

• bug symfony/symfony#58754 [Security] Store original token in token storage when implicitly exiting impersonation (@wouterj)

v7.2.0-BETA1

Changelog (v7.1.6...v7.2.0-BETA1)

• feature symfony/symfony#58166 [Security][SecurityBundle] Allow passing attributes to passport via Security::login() (@alexandre-daubois)
• feature symfony/symfony#58007 [Security] Deprecate empty user identifier (@ajgarlag)
• feature symfony/symfony#57525 [SecurityBundle] Improve profiler’s authenticators tab (@MatTheCat)
• feature symfony/symfony#57773 [Security] pass the current token to the checkPostAuth() method of user checkers (@xabbuh)
• feature symfony/symfony#57694 [SecurityBundle] Update web-token/jwt-library version and adjust checker parameters (@Spomky)
• feature symfony/symfony#57369 [Security] Display authenticators in the profiler even if they are all skipped (@MatTheCat)
• feature symfony/symfony#56838 [Security] Deprecate argument $secret of RememberMeToken and RememberMeAuthenticator (@nicolas-grekas)