bug symfony#58643 [SecurityBundle] Use Composer InstalledVersions to check if flex is installed (andyexeter)

fabpot · fabpot · commit d0ce2d674899 · 2025-05-10T11:56:13.000+02:00
This PR was submitted for the 7.1 branch but it was merged into the 7.2 branch instead. Discussion ---------- [SecurityBundle] Use Composer `InstalledVersions` to check if flex is installed | Q | A | ------------- | --- | Branch? | 7.1 | Bug fix? | yes | New feature? | no  | Deprecations? | no  | Issues | Fix symfony#58624  | License | MIT As discussed in symfony#58624, this fixes a class not found error which is thrown when security bundle config is missing. Commits ------- 5f8eb21 Use Composer InstalledVersions to check if flex is installed instead of existence of InstallRecipesCommand
diff --git a/src/Symfony/Bundle/SecurityBundle/DependencyInjection/SecurityExtension.php b/src/Symfony/Bundle/SecurityBundle/DependencyInjection/SecurityExtension.php
@@ -11,6 +11,7 @@
 
 namespace Symfony\Bundle\SecurityBundle\DependencyInjection;
 
+use Composer\InstalledVersions;
 use Symfony\Bridge\Twig\Extension\LogoutUrlExtension;
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface;
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\FirewallListenerFactoryInterface;
@@ -61,7 +62,6 @@
 use Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator;
 use Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
-use Symfony\Flex\Command\InstallRecipesCommand;
 
 /**
  * SecurityExtension.
@@ -92,7 +92,7 @@ public function prepend(ContainerBuilder $container): void
     public function load(array $configs, ContainerBuilder $container): void
     {
         if (!array_filter($configs)) {
-            $hint = class_exists(InstallRecipesCommand::class) ? 'Try running "composer symfony:recipes:install symfony/security-bundle".' : 'Please define your settings for the "security" config section.';
+            $hint = class_exists(InstalledVersions::class) && InstalledVersions::isInstalled('symfony/flex') ? 'Try running "composer symfony:recipes:install symfony/security-bundle".' : 'Please define your settings for the "security" config section.';
 
             throw new InvalidConfigurationException('The SecurityBundle is enabled but is not configured. '.$hint);
         }
