[Security] Fix AuthenticationTrustResolver::isAnonymous()

chalasr · nicolas-grekas · commit 83da786ece4b · 2021-08-25T15:00:22.000+02:00
diff --git a/src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php b/src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php
@@ -38,7 +38,7 @@ public function isAnonymous(TokenInterface $token = null/*, $deprecation = true*
             trigger_deprecation('symfony/security-core', '5.4', 'The "%s()" method is deprecated, use "isAuthenticated()" or "isFullFledged()" if you want to check if the request is (fully) authenticated.', __METHOD__);
         }
 
-        return $token && !$this->isAuthenticated($token);
+        return $token instanceof AnonymousToken || ($token && !$token->getUser());
     }
 
     /**

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ public function isAnonymous(TokenInterface $token = null/, $deprecation = true`
`38`	`38`	`trigger_deprecation('symfony/security-core', '5.4', 'The "%s()" method is deprecated, use "isAuthenticated()" or "isFullFledged()" if you want to check if the request is (fully) authenticated.', __METHOD__);`
`39`	`39`	`}`
`40`	`40`
`41`		`- return $token && !$this->isAuthenticated($token);`
	`41`	`+ return $token instanceof AnonymousToken \|\| ($token && !$token->getUser());`
`42`	`42`	`}`
`43`	`43`
`44`	`44`	`/**`