Can you also update the Security/Http's CHANGELOG file? The same wording as in the UPGRADE file should work

Can you also update the Security/Http's CHANGELOG file? The same wording as in the UPGRADE file should work

Should the phpdoc addition to UserInterface be documented in any UPGRADE or CHANGELOG file?

Please yes in Security\Core

Thank you @ajgarlag.

Thank you all for your comments and support!

Hi, I wonder if this PR is only half-done @nicolas-grekas @chalasr @ajgarlag.

What's expected for UserProviderInterface::loadUserByIdentifier ?

• Should the param be updated to non-empty-string ?
• Should it just throw a UserNotFoundException when called with '' ?
• Should we introduce a new exception InvalidIdentifierException ?

And it seems like there is some other method with a $identifier parameter...

@VincentLanglet This is enforced at the authenticator level so I think the current behavior is fine functionally speaking. Making user providers throw a specific exception when passed an empty string would be another feature to me.