Repository navigation
[Security] Clarify AuthenticatorManager constructor docblock for deprecated eraseCredentials argument - #65657
Conversation
|
Hey! I see that this is your first PR. That is great! Welcome! Symfony has a contribution guide which I suggest you to read. In short:
Review the GitHub status checks of your pull request and try to solve the reported issues. If some tests are failing, try to see if they are failing because of this change. When two Symfony core team members approve this change, it will be merged and you will become an official Symfony contributor! I am going to sit back now and wait for the reviews. Cheers! Carsonbot |
…ecated eraseCredentials argument
2bf1861 to
2f83185
Compare
|
Thank you for the fix, and welcome. I retargeted the PR to 8.1, where the deprecation and the docblock were introduced, and pushed the merge-ready version to your branch:
|
|
Thank you @webdevsamran. |
Since Symfony 8.1, the 6th argument of
AuthenticatorManager::__construct()is$exposeSecurityErrors: the formerbool $eraseCredentialsargument is gone from the signature and the arguments after it moved one position to the left. A bool in that position is only accepted as the removed$eraseCredentialsof the pre-8.1 signature, which triggers the deprecation and re-reads$exposeSecurityErrorsand$requiredBadgesfrom the next two arguments. The docblock described this as "passing a bool is deprecated", which made it look like a deprecated form of$exposeSecurityErrors; it now says which argument the bool is and where it comes from.