pass only strings to loadUserByUsername()

xabbuh · xabbuh · commit a47ed88cbe02 · 2017-05-17T09:23:43.000+02:00
diff --git a/security/guard_authentication.rst b/security/guard_authentication.rst
@@ -186,6 +186,10 @@ This requires you to implement six methods::
         {
             $apiKey = $credentials['token'];
 
+            if (null === $apiKey) {
+                return;
+            }
+
             // if null, authentication will fail
             // if a User object, checkCredentials() is called
             return $userProvider->loadUserByUsername($apiKey);
