Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: symfony/security-http
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v8.0.0
Choose a base ref
...
head repository: symfony/security-http
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v8.0.1
Choose a head ref
  • 6 commits
  • 4 files changed
  • 4 contributors

Commits on Nov 23, 2025

  1. Configuration menu
    Copy the full SHA
    64b65f2 View commit details
    Browse the repository at this point in the history

Commits on Nov 24, 2025

  1. Configuration menu
    Copy the full SHA
    9868490 View commit details
    Browse the repository at this point in the history

Commits on Nov 27, 2025

  1. Merge branch '7.3' into 7.4

    * 7.3:
      fix test
      Restore Relay 8.5 test
      account for PHP_ZTS being a boolean value on PHP 8.4+
      [Intl] Update data to ICU 78.1
      [Notifier][Smsbox] Add tests for `Mode` enum
      [DependencyInjection] Remove unused variable
      [Console] Fix exception message when abbreviation matches multiple hidden commands
      [FrameworkBundle] Fix TypeError when traversing scalar values in debug:config
      [DependencyInjection] Fix loop corruption in CheckTypeDeclarationsPass
      [Security] Fix UserBadge validation bypass via identifier normalizer
      [DependencyInjection] Fix invalid PHP syntax for nullable TypedReference in PhpDumper
      Fix typo in comment
      [Translation][Routing] Fix typos
      [Config] Fix nullable EnumNode with BackedEnum
      [String] Fix normalization in trimPrefix/trimSuffix
    xabbuh committed Nov 27, 2025
    Configuration menu
    Copy the full SHA
    92f9cc6 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2025

  1. Merge branch '7.4' into 8.0

    * 7.4: (40 commits)
      [PropertyInfo] treat mixed[] the same as array when getting types from docblocks
      treat `mixed[]` the same as `array` when getting types from docblocks
      install ext-zstd on PHP 8.5 as well
      fix merge
      [Console] Fix profile invokable command
      sync ControllerHelper docblock with latest AbstractController changes
      fix: Typehint for `createForm` in abstractController
      [Notifier][Mercure] Add support for Mercure 0.7
      register attribute loader arguments in a forward-compatible way
      ensure compatibility with RelayCluster 0.20.0
      mark test using a Redis connection as an integration test
      ensure compatibility with Relay extension 0.20.0
      [FrameworkBundle] Allow backed enum to be used in initial_marking workflow configuration
      [DependencyInjection] Fix `query_string` env processor for URLs without query string
      [HttpFoundation] Fix Expires response header for EventStream
      Bump Symfony version to 7.4.1
      Update VERSION for 7.4.0
      Update CHANGELOG for 7.4.0
      -
      [DependencyInjection] Fix state corruption in PhpFileLoader during recursive imports
      ...
    xabbuh committed Dec 1, 2025
    Configuration menu
    Copy the full SHA
    51b887d View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2025

  1. bug #62495 [Security][Http] Fix OIDC discovery when multiple HttpClie…

    …nt instances are used (Ali-HENDA)
    
    This PR was merged into the 7.4 branch.
    
    Discussion
    ----------
    
    [Security][Http] Fix OIDC discovery when multiple HttpClient instances are used
    
    | Q             | A
    | ------------- | ---
    | Branch?       | 7.4
    | Bug fix?      | yes
    | New feature?  | no
    | Deprecations? | no
    | Issues        | Fix
    | License       | MIT
    
    This PR fixes an issue in the OIDC JWKS discovery logic revealed in the discussion of #62369.
    $client->stream() was used incorrectly:
    $client could be undefined, and responses must be streamed using the same client instance that created them, which breaks when multiple HttpClientInterface instances are configured.
    The logic now performs sequential discovery per client, avoiding cross-client streaming and ensuring correctness.
    
    This PR also hardens the "use" check ($key['use'] ?? null).
    
    Commits
    -------
    
    7a885d29993 [Security] Fix OIDC discovery when using multiple HttpClient instances
    nicolas-grekas committed Dec 5, 2025
    Configuration menu
    Copy the full SHA
    46a4432 View commit details
    Browse the repository at this point in the history
  2. Merge branch '7.4' into 8.0

    * 7.4:
      [TypeInfo] Simple array should be array type
      Handle signals on text input
      [TwigBridge] Fix form constraint
      [Runtime] Reuse the already created Request object when the app needs it as argument returns a kernel
      [Config] Fix array shape generation for backed enums
      [Config] Define `TreeBuilder` default generic type
      Update validators.el.xlf
      Fix MoneyType: add missing step attribute when html5=true
      [JsonStreamer] fix invalid json output for list of self
      [Console] Preserve `--help` option when a command is not found
      [FrameworkBundle] Fix using `FailedMessages*Command` with `SigningSerializer`
      [Lock] Fix unserializing already serialized Key payloads
      [HttpClient] CachingHttpClient must run after UriTemplate and Scoping
      Only register PhpConfigReferenceDumpPass in dev env with debug flag enabled
      [Messenger] Fix PHP 8.5 deprecation for pgsqlGetNotify() in PostgreSQL transport
      chore: PHP CS Fixer - do not use deprecated sets in config
      verify spanish translations with state needs-review-translation
      [Security] Fix OIDC discovery when using multiple HttpClient instances
      [DependencyInjection] Allow manual bindings on parameters with #[Target]
    nicolas-grekas committed Dec 5, 2025
    Configuration menu
    Copy the full SHA
    6bd07ac View commit details
    Browse the repository at this point in the history
Loading