-
-
Notifications
You must be signed in to change notification settings - Fork 9.6k
[Security][SecurityBundle] Deprecate the HTTP digest auth #24335
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
@@ -111,7 +111,6 @@ public function testFirewalls() | |||
'remote_user', | |||
'form_login', | |||
'http_basic', | |||
'http_digest', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Instead of removing this now, we could mark the corresponding test case with @group legacy
, but the test case must not be removed in 4.0.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Or copy fixture container1.*
as container1_with_digest.*
and duplicate the test so that it can be removed in 4.0? (at least for this one)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, done.
@@ -20,9 +20,18 @@ | |||
* HttpDigestFactory creates services for HTTP digest authentication. | |||
* | |||
* @author Fabien Potencier <fabien@symfony.com> | |||
* | |||
* @deprecated since 3.4, to be removed in 4.0. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
dot should be removed :) (same everywhere)
@@ -111,7 +111,6 @@ public function testFirewalls() | |||
'remote_user', | |||
'form_login', | |||
'http_basic', | |||
'http_digest', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Or copy fixture container1.*
as container1_with_digest.*
and duplicate the test so that it can be removed in 4.0? (at least for this one)
UPGRADE-4.0 should be updated |
Missing UPGRADE-4.0 update done. |
Thank you @ogizanagi. |
…uth (ogizanagi) This PR was merged into the 3.4 branch. Discussion ---------- [Security][SecurityBundle] Deprecate the HTTP digest auth | Q | A | ------------- | --- | Branch? | 3.4 | Bug fix? | no | New feature? | no <!-- don't forget updating src/**/CHANGELOG.md files --> | BC breaks? | no | Deprecations? | yes <!-- don't forget updating UPGRADE-*.md files --> | Tests pass? | yes | Fixed tickets | #24325 <!-- #-prefixed issue number(s), if any --> | License | MIT | Doc PR | N/A See #24336 for the removal PR on master. Commits ------- 11fe79d [Security][SecurityBundle] Deprecate the HTTP digest auth
See #24336 for the removal PR on master.