diff options
| author | Grégoire Pineau <lyrixx@lyrixx.info> | 2016-04-03 22:28:33 +0200 |
|---|---|---|
| committer | Grégoire Pineau <lyrixx@lyrixx.info> | 2016-04-04 14:27:18 +0200 |
| commit | 8930c053da78b96618182f855d8b5f0de5de4e14 (patch) | |
| tree | dae68a870f0e859d296d01741387caabf53f1070 /Core/Encoder/UserPasswordEncoderInterface.php | |
| parent | f9e167fde187546f3eb91f62d8de5ba36483a70a (diff) | |
| download | symfony-security-8930c053da78b96618182f855d8b5f0de5de4e14.zip symfony-security-8930c053da78b96618182f855d8b5f0de5de4e14.tar.gz symfony-security-8930c053da78b96618182f855d8b5f0de5de4e14.tar.bz2 | |
[Security] Fixed SwitchUserListener when exiting an impersonication with AnonymousToken
If you configure a firewall with switch user with `role: IS_AUTHENTICATED_ANONYMOUSLY` it's impossible to exit the
impersonation because the next line `$this->provider->refreshUser($original->getUser())` will fail. It fails because `RefreshUser`
expects an instance of `UserInterface` and here it's a string.
Therefore, it does not make sense to refresh an Anonymous Token, right ?
Diffstat (limited to 'Core/Encoder/UserPasswordEncoderInterface.php')
0 files changed, 0 insertions, 0 deletions