Releases: symfony/security-http
Releases · symfony/security-http
v7.1.0-BETA1
Changelog (v7.0.7...v7.1.0-BETA1)
- feature symfony/symfony#54443 [Security] Add support for dynamic CSRF id with Expression in
#[IsCsrfTokenValid](@yguedidi) - feature symfony/symfony#53682 [Security] Support RSA algorithm signature for OIDC tokens (@Spomky)
- feature symfony/symfony#53851 [Security] Ignore empty username or password login attempts (@llupa)
- feature symfony/symfony#48276 [Security] add CAS 2.0 AccessToken handler (@nacorp)
- feature symfony/symfony#52961 [Security][SecurityBundle] Add
#[IsCsrfTokenValid]attribute (@yguedidi)
Contributors
Spomky, yguedidi, and 2 other contributors
Assets 2
v7.0.7
Changelog (v7.0.6...v7.0.7)
- bug symfony/symfony#54665 Add test for AccessTokenHeaderRegex and adjust regex (@Spomky)
- bug symfony/symfony#54059 [Security] Validate that CSRF token in form login is string similar to username/password (@glaubinix)
Contributors
glaubinix and Spomky
Assets 2
v6.4.7
Changelog (v6.4.6...v6.4.7)
- bug symfony/symfony#54665 Add test for AccessTokenHeaderRegex and adjust regex (@Spomky)
- bug symfony/symfony#54059 [Security] Validate that CSRF token in form login is string similar to username/password (@glaubinix)
Contributors
glaubinix and Spomky
Assets 2
v5.4.39
Changelog (v5.4.38...v5.4.39)
- bug symfony/symfony#54059 [Security] Validate that CSRF token in form login is string similar to username/password (@glaubinix)
Contributors
glaubinix
Assets 2
v5.4.38
Changelog (v5.4.37...v5.4.38)
- no significant changes
v7.0.4
Changelog (v7.0.3...v7.0.4)
- bug symfony/symfony#54045 [Config][Messenger][Security] Don't turn deprecations into exceptions when unserializing (@nicolas-grekas)
- bug symfony/symfony#53703 [HttpFoundation] Fix clearing CHIPS cookies (@misaert)
Contributors
nicolas-grekas and misaert
Assets 2
v6.4.4
Changelog (v6.4.3...v6.4.4)
- bug symfony/symfony#54045 [Config][Messenger][Security] Don't turn deprecations into exceptions when unserializing (@nicolas-grekas)
- bug symfony/symfony#53703 [HttpFoundation] Fix clearing CHIPS cookies (@misaert)
Contributors
nicolas-grekas and misaert
Assets 2
v5.4.36
Changelog (v5.4.35...v5.4.36)
- bug symfony/symfony#54045 [Config][Messenger][Security] Don't turn deprecations into exceptions when unserializing (@nicolas-grekas)
Contributors
nicolas-grekas
Assets 2
v7.0.3
Changelog (v7.0.2...v7.0.3)
- bug symfony/symfony#53509 [Security] Fix
AuthenticationUtils::getLastUsername()returning null (@alexandre-daubois)
Contributors
alexandre-daubois
Assets 2
v6.4.3
Changelog (v6.4.2...v6.4.3)
- bug symfony/symfony#53509 [Security] Fix
AuthenticationUtils::getLastUsername()returning null (@alexandre-daubois)
Contributors
alexandre-daubois