Releases · symfony/security-http

feature symfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
feature symfony/symfony#61949 [HttpFoundation] Deprecate HTTP method override for methods GET, HEAD, CONNECT and TRACE (@nicolas-grekas)
feature symfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
feature symfony/symfony#61948 [HttpFoundation] Deprecate Request::get() in favor of using properties ->attributes, query or request directly (@nicolas-grekas)
feature symfony/symfony#61789 [Security] deprecate extending RememberMeDetails using legacy constructor signature (@xabbuh)
feature symfony/symfony#61760 [Security] remove the user FQCN from remember me cookies (@xabbuh)
feature symfony/symfony#61743 [Security] deprecate the FQCN properties of PersistentToken and RememberMeDetails (@xabbuh)
feature symfony/symfony#61694 [Security] Add $tokenSource argument to #[IsCsrfTokenValid] to support reading tokens from the query string or headers (@webda2l)
feature symfony/symfony#61654 [Security] Deprecate PersistentToken::getClass() and RememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
feature symfony/symfony#61542 [Security] Allow subclassing #[IsGranted] (@nicolas-grekas)
feature symfony/symfony#61504 [SecurityHttp] Removes final keyword from IsGranted attribute (@crtl)
feature symfony/symfony#61359 [Security] Add $methods support to #[IsGranted] to restrict access by HTTP method (@santysisi)
feature symfony/symfony#61204 [Security] Support union type for #[CurrentUser] attribute (@VincentLanglet)
feature symfony/symfony#61187 Declare new parameters on interfaces and methods explicitly (@nicolas-grekas)
feature symfony/symfony#61183 [Security] Throw when passing an empty string as $userIdentifier and tighten AuthenticatorManager and OidcTokenHandler arguments (@nicolas-grekas)
feature symfony/symfony#61011 [Security] Remove deprecated RememberMeToken::getSecret() (@ktherage)
feature symfony/symfony#60879 [Security] Remove callable firewall listeners support (@MatTheCat)
feature symfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)
feature symfony/symfony#60742 [Ldap][Security] Remove deprecated eraseCredentials() from (User|Token)Interface (@chalasr)
feature symfony/symfony#60697 Enforce return types on all components (@nicolas-grekas)
feature symfony/symfony#60639 Bump Symfony 8 to PHP >= 8.4 (@nicolas-grekas)

Contributors

ruudk, nicolas-grekas, and 9 other contributors

Assets 2

27 Oct 10:53

fabpot

v7.4.0-BETA1

cbef3f5

v7.4.0-BETA1 Pre-release

Pre-release

Changelog (v7.3.4...v7.4.0-BETA1)

feature symfony/symfony#62043 [Security] Allow multiple OIDC discovery endpoints (@ruudk)
feature symfony/symfony#61949 [HttpFoundation] Deprecate HTTP method override for methods GET, HEAD, CONNECT and TRACE (@nicolas-grekas)
feature symfony/symfony#60660 [Security] Add security:oidc-token:generate command (@Jean-Beru)
feature symfony/symfony#61948 [HttpFoundation] Deprecate Request::get() in favor of using properties ->attributes, query or request directly (@nicolas-grekas)
feature symfony/symfony#61789 [Security] deprecate extending RememberMeDetails using legacy constructor signature (@xabbuh)
feature symfony/symfony#61743 [Security] deprecate the FQCN properties of PersistentToken and RememberMeDetails (@xabbuh)
feature symfony/symfony#61694 [Security] Add $tokenSource argument to #[IsCsrfTokenValid] to support reading tokens from the query string or headers (@webda2l)
feature symfony/symfony#61654 [Security] Deprecate PersistentToken::getClass() and RememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
feature symfony/symfony#61542 [Security] Allow subclassing #[IsGranted] (@nicolas-grekas)
feature symfony/symfony#61504 [SecurityHttp] Removes final keyword from IsGranted attribute (@crtl)
feature symfony/symfony#61359 [Security] Add $methods support to #[IsGranted] to restrict access by HTTP method (@santysisi)
feature symfony/symfony#61204 [Security] Support union type for #[CurrentUser] attribute (@VincentLanglet)
feature symfony/symfony#60614 [Security] Deprecate callable firewall listeners (@MatTheCat)