Skip to content

[Security] Fix bug introduced in entry_point configuration (#36575) #36650

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 1, 2020

Conversation

wouterj
Copy link
Member

@wouterj wouterj commented May 1, 2020

Q A
Branch? master
Bug fix? yes
New feature? no
Deprecations? no
Tickets -
License MIT
Doc PR -

@fabpot
Copy link
Member

fabpot commented May 1, 2020

Thank you @wouterj.

@fabpot fabpot merged commit c30d6f9 into symfony:master May 1, 2020
@wouterj wouterj deleted the patch-18 branch May 1, 2020 07:59
@fabpot
Copy link
Member

fabpot commented May 1, 2020

I was too fast to try the patch. I thought it fixed the issue, but I messed up with Git. Unfortunately, it does not fix the issue for me.

@wouterj
Copy link
Member Author

wouterj commented May 1, 2020

Hmm, I don't have time to test this locally myself today.

Thinking about it, I think there might be an issue when no enabled authenticator factory implements EntryPointFactoryInterface. In that case, $entryPoints is still empty and simply ignored (no error). Can you maybe try (line 560):

-        if ($entryPoints) {
+        if ($this->authenticatorManagerEnabled) {

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants