This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
symfony/tests/Symfony/Tests/Component/Security/Http/Firewall
Fabien Potencier 8d9ea7c1ce merged branch dpb587/patch-sectok (PR #2414)
Commits
-------

ab9caa0 [Security] Check for request's session before attempting writes.
dabff0e [Security] Support removing tokens from a session.

Discussion
----------

[Security] Support removing tokens from a session.

Currently there is no way to remove a session's security token without invalidating the entire session and all its data (the ContextListener will only update the session if a token is non-null and non-anonymous). This patch fixes that.

I consider this a bug and I found no tests to prove otherwise. Let me know if I'm mistaken. Originally mentioned at https://groups.google.com/d/topic/symfony-devs/ojLvh0WUbfo/discussion

Bug fix: yes
Feature addition: no
Backwards compatibility break: no
Symfony2 tests pass: yes
Fixes the following tickets: -

---------------------------------------------------------------------------

by ms937 at 2011/10/24 05:19:21 -0700

This change looks good to me. In fact I'm using similar patch in my app and it works as intended. Also, several other people requested this on the mailing list. Could someone from Symfony team merge this? Thanks.
2011-11-07 23:19:37 +01:00
..
AccessListenerTest.php [Security] Update access listener constructor's prototype and add tests 2011-06-26 10:28:10 +02:00
AnonymousAuthenticationListenerTest.php [Security] Add tests for the anonymous authentication listener 2011-06-26 11:28:17 +02:00
BasicAuthenticationListenerTest.php Fixed typo 2011-10-31 09:00:49 +01:00
ChannelListenerTest.php [Security] Add tests for the channel listener 2011-06-26 11:56:08 +02:00
ContextListenerTest.php [Security] Check for request's session before attempting writes. 2011-10-25 14:19:34 -04:00
RememberMeListenerTest.php removed unused use statements 2011-10-29 11:56:30 +02:00