2.0.0-BETA2
Pre-release
Pre-release
Changelog
- Deprecated: configuration parameter
firewall_names
, firewalls are now computed automatically - all firewalls that have definedoauth
authenticator/provider will be collected, - Added: Ability to automatically refresh expired access tokens (only for derived from
GenericOAuth2ResourceOwner
resource owners), if optionrefresh_on_expire
set totrue
, - Enhancement: Refresh token listener is disabled by default and will only be enabled if at least one resource owner has option
refresh_on_expure
set totrue
, - Enhancement: (
@internal
) Removed/replaced redundant argument$firewallNames
from controllers. If controller class was copied and replaced, adapt list of arguments: In controller use$resourceOwnerMapLocator->getFirewallNames()
, - Bugfix:
RefreshTokenListener
cannot be lazy. If current firewall is lazy (or anonymous: lazy) then current auth token is often initializing onkernel.response
. In this case new access token will not be stored in session. Therefore, the expired token will be refreshed on each request, - Bugfix:
InteractiveLoginEvent
will be triggered also forOAuthAuthenticator
, - Maintain: Changed config files from
*.xml
to*.php
(services and routes). Xml routing configsconnect.xml
,login.xml
andredirect.xml
are steel present but deprecated. Please use*.php
variants in your includes instead.
Details What's Changed
- increase phpstan to level 2 by @dmaicher in #1754
- Define
hwi_oauth.connect.confirmation
parameter by @franmomu in #1756 - Maintain | Remove
Makefile
in favour of composer scripts by @stloyd in #1766 - make twig extension lazy by using a Runtime by @dmaicher in #1741
- Remove support for FOSUser bundle by @stloyd in #1732
- bump to phpstan level 3 by @dmaicher in #1770
- Bump minimal PHP version to 7.4 by @XWB in #1774
- Maintain | Adjust codebase to match PHPStan level 5 by @stloyd in #1771
- Use type hints and return types in ResourceOwnerMapInterface by @XWB in #1773
- Rework ResourceOwnerMap to use service locator instead of whole DI container by @stloyd in #1775
- Bugfix | Prevent issue with missing parameter when
connect
option is not enabled by @stloyd in #1782 - Maintain | Update min. Twig version to work with PHP 8 by @stloyd in #1789
- [BC Break] Rework resource owners to use Symfony Http Client internally by @stloyd in #1681
- BC Break | Make classes final where expected & adjust types to PHP 7.4 by @stloyd in #1778
- Maintain | Update tests to use type & return hints by @stloyd in #1791
- Update Yahoo resource owner to use OAuth2 by @stloyd in #1790
- [2.x] Fix HTTP client definition by @Jean85 in #1792
- Maintain | Fixed php-cs-fixer & phpstan reports by @stloyd in #1801
- Rework Github Actions to be more efficient by @stloyd in #1807
- Update link to LinkedIn by @alexislefebvre in #1811
- Fix EntityUserProviderTest by @sjerdo in #1822
- Fix parsing OAuth1.0a responses for Twitter by @sjerdo in #1821
- Spotify | Add path for profile picture by @sjerdo in #1819
- Pass content in HTTP POST request on OAuth server by @rmlev in #1826
- Fix code style issue by @sjerdo in #1827
- Maintain | Update compatibility with PHP 8.1 by @stloyd in #1828
- Maintain | Rework CI by @stloyd in #1829
- Maintain | Update PHPStan to version 1.0 by @stloyd in #1830
- Maintain | Add support for Symfony 6 by @stloyd in #1800
- Maintain | Merge branch 1.4 into master one by @stloyd in #1834
- Maintain | Run new security already on Symfony 5.4 by @stloyd in #1837
- Bugfix | Test BC layer for Symfony Security <5.4 by @stloyd in #1839
- Bugfix | Fixed issue when
connect
configuration is not set butConnectController
was used by @stloyd in #1844 - Reviewed authenticator and made refreshToken method public. by @gassan in #1831
- Maintain | Adjust docs to follow Symfony changes by @stloyd in #1845
- Bugfix | Added missing
RememberMeBadge
into OAuth passport by @stloyd in #1846 - Force particular methods on internal routes by @stloyd in #1847
- Maintain | Rework bundle structure to match Symfony best practices by @stloyd in #1799
- oauth token of the same class will be created. fix in tests by @gassan in #1849
- Track oauth requests by symfony-profiler by @gassan in #1852
- Allow null User for refreshing oauth token by @gassan in #1855
- Http client for symfony 4.4 by @gassan in #1856
- RFC | Lets switch configs from xml to php by @gassan in #1859
- Review: Removed/replaced redundant parameter $firewallNames in Controllers by @gassan in #1861
- auto refresh oauth2 token on expire by @gassan in #1850
- Maintain | Improved code quality by adding hint & return types by @stloyd in #1863
- Keycloak: default paths mapping for a new created keycloak realm by @gassan in #1858
- Removed option firewall_names by @gassan in #1864
- Maintain | Added new Composer 2.2 config for "allow-plugins" by @stloyd in #1865
- Bugfix: Refresh token listener should not be lazy. by @gassan in #1867
- set resourceOwner services directly without using tag by @dmaicher in #1874
- Bugfix: InteractiveLoginEvent Event will be triggered also for OAuthAuthenticator by @gassan in #1877
New Contributors
- @sjerdo made their first contribution in #1822
- @rmlev made their first contribution in #1826
- @gassan made their first contribution in #1831
Full Changelog: 1.4.5...2.0.0-BETA2