-
-
Notifications
You must be signed in to change notification settings - Fork 9.6k
Session creation regression made by #6964 #7011
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
fabpot
added a commit
that referenced
this issue
Feb 7, 2013
This PR was merged into the 2.1 branch. Commits ------- 3615e19 [Security] fixed session creation on login (closes #7011) Discussion ---------- [Security] fixed session creation on login (closes #7011) | Q | A | ------------- | --- | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #7011 | License | MIT | Doc PR | n/a I fixed the test with UsernamePasswordToken (should start the session) and added a new test without token (should not start session).
fabpot
added a commit
that referenced
this issue
Feb 11, 2013
* 2.1: added support for the X-Forwarded-For header (closes #6982, closes #7000) fixed the IP address in HttpCache when calling the backend [EventDispatcher] Added assertion. [EventDispathcer] Fix removeListener [DependencyInjection] Add clone for resources which were introduced in 2.1 [DependencyInjection] Allow frozen containers to be dumped to graphviz Fix 'undefined index' error, when entering scope recursively [Security] fixed session creation on login (closes #7011) Add dot character `.` to legal mime subtype regular expression [HttpFoundation] fixed the creation of sub-requests under some circumstancies (closes #6923, closes #6936)
fabpot
added a commit
that referenced
this issue
Feb 11, 2013
* 2.2: Fixed XmlFileLoaderTest::testLoadThrowsExceptionWithInvalidFileEvenWithoutSchemaValidation moved file hash calculation to own method [Validator] Add check for existing metadata on property added support for the X-Forwarded-For header (closes #6982, closes #7000) fixed the IP address in HttpCache when calling the backend [EventDispatcher] Added assertion. [EventDispathcer] Fix removeListener [DependencyInjection] Add clone for resources which were introduced in 2.1 [DependencyInjection] Allow frozen containers to be dumped to graphviz Fix 'undefined index' error, when entering scope recursively [Security] fixed session creation on login (closes #7011) replaced usage of the deprecated pattern routing key (replaced with path) Add dot character `.` to legal mime subtype regular expression [HttpFoundation] fixed the creation of sub-requests under some circumstancies (closes #6923, closes #6936)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The changes made by #6964 breaks an API where the first request is a "POST /login", in this case the authentication always fails because the session is not created.
On the second request it works.
The text was updated successfully, but these errors were encountered: