Merge branch '6.4' into 7.0

* 6.4:
  [Security] alway use getUserIdentifier in InMemoryTokenProvider
  Update phpdoc to not reference removed classes
  [Security] Remove isAuthenticated and setAuthenticated token methods in tests

Author: derrabus

Authentication/AuthenticationFailureHandlerInterface.php

@@ -27,9 +27,7 @@
 interface AuthenticationFailureHandlerInterface
 {
     /**
-     * This is called when an interactive authentication attempt fails. This is
-     * called by authentication listeners inheriting from
-     * AbstractAuthenticationListener.
+     * This is called when an interactive authentication attempt fails.
      */
     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): Response;
 }

Firewall/LogoutListener.php

@@ -66,7 +66,7 @@ public function supports(Request $request): ?bool
      * validate the request.
      *
      * @throws LogoutException   if the CSRF token is invalid
-     * @throws \RuntimeException if the LogoutSuccessHandlerInterface instance does not return a response
+     * @throws \RuntimeException if the LogoutEvent listener does not set a response
      */
     public function authenticate(RequestEvent $event): void
     {

Tests/Firewall/ContextListenerTest.php

@@ -557,15 +557,6 @@ public function getUserIdentifier(): string
         return $this->getUserIdentifier();
     }
 
-    public function isAuthenticated(): bool
-    {
-        return true;
-    }
-
-    public function setAuthenticated(bool $isAuthenticated)
-    {
-    }
-
     public function eraseCredentials(): void
     {
     }