v3.4.42

Changelog (v3.4.41...v3.4.42)

• no changes

v4.4.9

Changelog (v4.4.8...v4.4.9)

• bug #37008 Fixed AbstractToken::hasUserChanged() (wouterj)
• bug #36974 Fixed handling of CSRF logout error (wouterj)
• bug #35944 Fix wrong roles comparison (thlbaut)
• bug #36862 Unserialize $parentData, if needed, to avoid errors (rfaivre)
• bug #36824 fix compat of NativePasswordEncoder with pre-PHP74 values of PASSWORD_* consts (nicolas-grekas)

v3.4.41

Changelog (v3.4.40...v3.4.41)

• bug #36974 Fixed handling of CSRF logout error (wouterj)

v4.4.8

Changelog (v4.4.7...v4.4.8)

• bug #36498 fix escape for username in LdapBindAuthenticationProvider.php (stoccc)
• bug #36408 add PolyfillTestCaseTrait::expectExceptionMessageMatches to provide FC with recent phpunit versions (soyuka)
• bug #36335 Track session usage whenever a new token is set (wouterj)
• bug #36223 Ignore all non existent username protection errors (fancyweb)
• bug #36283 forward multiple attributes voting flag (xabbuh)

v3.4.40

Changelog (v3.4.39...v3.4.40)

• bug #36498 fix escape for username in LdapBindAuthenticationProvider.php (stoccc)
• bug #36252 Allow setting cookie security settings for delete_cookies (wouterj)

v4.4.7

Changelog (v4.4.6...v4.4.7)

• bug #36252 Allow setting cookie security settings for delete_cookies (wouterj)

v3.4.39

Changelog (v3.4.38...v3.4.39)

• bug #36176 Check if firewall is stateless before checking for session/previous session (koenreiniers)
• bug #36175 Remember me: allow to set the samesite cookie flag (dunglas)

v4.4.6

Changelog (v4.4.5...v4.4.6)

• bug #36176 Check if firewall is stateless before checking for session/previous session (koenreiniers)
• bug #36175 Remember me: allow to set the samesite cookie flag (dunglas)
• bug #36151 Fixed hardcoded value of SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE (lyrixx)
• bug #36118 don't require the session to be started when tracking its id (nicolas-grekas)
• bug #36103 fix preloading script generation (nicolas-grekas)

v4.4.5

Changelog (v4.4.4...v4.4.5)

• bug #35839 Allow switching to another user when already switched (chalasr)
• bug #35792 Prevent TypeError in case RememberMetoken has no attached user (nikophil)
• bug #35583 Add missing use statements (fabpot)
• bug #35497 Fail on empty password verification (without warning on any implementation) (Stefan Kruppa)

v3.4.38

Changelog (v3.4.37...v3.4.38)

• bug #35839 Allow switching to another user when already switched (chalasr)
• bug #35792 Prevent TypeError in case RememberMetoken has no attached user (nikophil)