From 5b7e1e6f682354e086d8129e48fc2f245aea6fb1 Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Sun, 5 May 2013 18:35:57 +0200 Subject: [PATCH] added a missing check for the provider key --- .../Http/Firewall/AbstractPreAuthenticatedListener.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php b/src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php index 66041be7b6..1a0999e1f4 100644 --- a/src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php +++ b/src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php @@ -47,7 +47,7 @@ abstract class AbstractPreAuthenticatedListener implements ListenerInterface } /** - * Handles X509 authentication. + * Handles pre-authentication. * * @param GetResponseEvent $event A GetResponseEvent instance */ @@ -62,7 +62,7 @@ abstract class AbstractPreAuthenticatedListener implements ListenerInterface list($user, $credentials) = $this->getPreAuthenticatedData($request); if (null !== $token = $this->securityContext->getToken()) { - if ($token instanceof PreAuthenticatedToken && $token->isAuthenticated() && $token->getUsername() === $user) { + if ($token instanceof PreAuthenticatedToken && $this->providerKey == $token->getProviderKey() && $token->isAuthenticated() && $token->getUsername() === $user) { return; } }