Skip to content

2.0.0-BETA2

Pre-release
Pre-release
Compare
Choose a tag to compare
@stloyd stloyd released this 16 Jan 15:46
· 158 commits to master since this release

Changelog

  • Deprecated: configuration parameter firewall_names, firewalls are now computed automatically - all firewalls that have defined oauth authenticator/provider will be collected,
  • Added: Ability to automatically refresh expired access tokens (only for derived from GenericOAuth2ResourceOwner resource owners), if option refresh_on_expire set to true,
  • Enhancement: Refresh token listener is disabled by default and will only be enabled if at least one resource owner has option refresh_on_expure set to true,
  • Enhancement: (@internal) Removed/replaced redundant argument $firewallNames from controllers. If controller class was copied and replaced, adapt list of arguments: In controller use $resourceOwnerMapLocator->getFirewallNames(),
  • Bugfix: RefreshTokenListener cannot be lazy. If current firewall is lazy (or anonymous: lazy) then current auth token is often initializing on kernel.response. In this case new access token will not be stored in session. Therefore, the expired token will be refreshed on each request,
  • Bugfix: InteractiveLoginEvent will be triggered also for OAuthAuthenticator,
  • Maintain: Changed config files from *.xml to *.php (services and routes). Xml routing configs connect.xml, login.xml and redirect.xml are steel present but deprecated. Please use *.php variants in your includes instead.

Details What's Changed

  • increase phpstan to level 2 by @dmaicher in #1754
  • Define hwi_oauth.connect.confirmation parameter by @franmomu in #1756
  • Maintain | Remove Makefile in favour of composer scripts by @stloyd in #1766
  • make twig extension lazy by using a Runtime by @dmaicher in #1741
  • Remove support for FOSUser bundle by @stloyd in #1732
  • bump to phpstan level 3 by @dmaicher in #1770
  • Bump minimal PHP version to 7.4 by @XWB in #1774
  • Maintain | Adjust codebase to match PHPStan level 5 by @stloyd in #1771
  • Use type hints and return types in ResourceOwnerMapInterface by @XWB in #1773
  • Rework ResourceOwnerMap to use service locator instead of whole DI container by @stloyd in #1775
  • Bugfix | Prevent issue with missing parameter when connect option is not enabled by @stloyd in #1782
  • Maintain | Update min. Twig version to work with PHP 8 by @stloyd in #1789
  • [BC Break] Rework resource owners to use Symfony Http Client internally by @stloyd in #1681
  • BC Break | Make classes final where expected & adjust types to PHP 7.4 by @stloyd in #1778
  • Maintain | Update tests to use type & return hints by @stloyd in #1791
  • Update Yahoo resource owner to use OAuth2 by @stloyd in #1790
  • [2.x] Fix HTTP client definition by @Jean85 in #1792
  • Maintain | Fixed php-cs-fixer & phpstan reports by @stloyd in #1801
  • Rework Github Actions to be more efficient by @stloyd in #1807
  • Update link to LinkedIn by @alexislefebvre in #1811
  • Fix EntityUserProviderTest by @sjerdo in #1822
  • Fix parsing OAuth1.0a responses for Twitter by @sjerdo in #1821
  • Spotify | Add path for profile picture by @sjerdo in #1819
  • Pass content in HTTP POST request on OAuth server by @rmlev in #1826
  • Fix code style issue by @sjerdo in #1827
  • Maintain | Update compatibility with PHP 8.1 by @stloyd in #1828
  • Maintain | Rework CI by @stloyd in #1829
  • Maintain | Update PHPStan to version 1.0 by @stloyd in #1830
  • Maintain | Add support for Symfony 6 by @stloyd in #1800
  • Maintain | Merge branch 1.4 into master one by @stloyd in #1834
  • Maintain | Run new security already on Symfony 5.4 by @stloyd in #1837
  • Bugfix | Test BC layer for Symfony Security <5.4 by @stloyd in #1839
  • Bugfix | Fixed issue when connect configuration is not set but ConnectController was used by @stloyd in #1844
  • Reviewed authenticator and made refreshToken method public. by @gassan in #1831
  • Maintain | Adjust docs to follow Symfony changes by @stloyd in #1845
  • Bugfix | Added missing RememberMeBadge into OAuth passport by @stloyd in #1846
  • Force particular methods on internal routes by @stloyd in #1847
  • Maintain | Rework bundle structure to match Symfony best practices by @stloyd in #1799
  • oauth token of the same class will be created. fix in tests by @gassan in #1849
  • Track oauth requests by symfony-profiler by @gassan in #1852
  • Allow null User for refreshing oauth token by @gassan in #1855
  • Http client for symfony 4.4 by @gassan in #1856
  • RFC | Lets switch configs from xml to php by @gassan in #1859
  • Review: Removed/replaced redundant parameter $firewallNames in Controllers by @gassan in #1861
  • auto refresh oauth2 token on expire by @gassan in #1850
  • Maintain | Improved code quality by adding hint & return types by @stloyd in #1863
  • Keycloak: default paths mapping for a new created keycloak realm by @gassan in #1858
  • Removed option firewall_names by @gassan in #1864
  • Maintain | Added new Composer 2.2 config for "allow-plugins" by @stloyd in #1865
  • Bugfix: Refresh token listener should not be lazy. by @gassan in #1867
  • set resourceOwner services directly without using tag by @dmaicher in #1874
  • Bugfix: InteractiveLoginEvent Event will be triggered also for OAuthAuthenticator by @gassan in #1877

New Contributors

Full Changelog: 1.4.5...2.0.0-BETA2