[Security] Add ability for authenticators to explain why they didn't support a request

MatTheCat · MatTheCat · commit 12f967986fd2 · 2025-05-26T15:11:15.000+02:00
diff --git a/src/Symfony/Bundle/SecurityBundle/Resources/views/Collector/security.html.twig b/src/Symfony/Bundle/SecurityBundle/Resources/views/Collector/security.html.twig
@@ -423,7 +423,9 @@
                                         <div id="authenticator-{{ i }}" class="font-normal">
                                             {% if authenticator.supports is same as(false) %}
                                                 <div class="empty">
-                                                    <p>This authenticator did not support the request.</p>
+                                                    {% for reason in (authenticator.supportReasons ?? []) is empty ? ['This authenticator did not support the request.'] : authenticator.supportReasons %}
+                                                        <p>{{ reason }}</p>
+                                                    {% endfor %}
                                                 </div>
                                             {% elseif authenticator.authenticated is null %}
                                                 <div class="empty">
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/DependencyInjection/Compiler/RegisterEntryPointsPassTest.php b/src/Symfony/Bundle/SecurityBundle/Tests/DependencyInjection/Compiler/RegisterEntryPointsPassTest.php
@@ -28,6 +28,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
 use Symfony\Component\Security\Http\Firewall\ExceptionListener;
+use Symfony\Component\Security\Http\RequestSupport;
 
 class RegisterEntryPointsPassTest extends TestCase
 {
@@ -71,7 +72,7 @@ public function testProcessResolvesChildDefinitionsClass()
 
 class CustomAuthenticator extends AbstractAuthenticator implements AuthenticationEntryPointInterface
 {
-    public function supports(Request $request): ?bool
+    public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool
     {
         return false;
     }
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/DependencyInjection/SecurityExtensionTest.php b/src/Symfony/Bundle/SecurityBundle/Tests/DependencyInjection/SecurityExtensionTest.php
@@ -38,6 +38,7 @@
 use Symfony\Component\Security\Http\Authenticator\AuthenticatorInterface;
 use Symfony\Component\Security\Http\Authenticator\HttpBasicAuthenticator;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
+use Symfony\Component\Security\Http\RequestSupport;
 
 class SecurityExtensionTest extends TestCase
 {
@@ -959,7 +960,7 @@ protected function getContainer()
 
 class TestAuthenticator implements AuthenticatorInterface
 {
-    public function supports(Request $request): ?bool
+    public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool
     {
     }
 
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/Functional/Bundle/AuthenticatorBundle/ApiAuthenticator.php b/src/Symfony/Bundle/SecurityBundle/Tests/Functional/Bundle/AuthenticatorBundle/ApiAuthenticator.php
@@ -22,6 +22,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
+use Symfony\Component\Security\Http\RequestSupport;
 
 class ApiAuthenticator extends AbstractAuthenticator
 {
@@ -32,7 +33,7 @@ public function __construct(bool $selfLoadingUser = false)
         $this->selfLoadingUser = $selfLoadingUser;
     }
 
-    public function supports(Request $request): ?bool
+    public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool
     {
         return $request->headers->has('X-USER-EMAIL');
     }
diff --git a/src/Symfony/Component/Ldap/Security/LdapAuthenticator.php b/src/Symfony/Component/Ldap/Security/LdapAuthenticator.php
@@ -20,6 +20,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
 use Symfony\Component\Security\Http\EntryPoint\Exception\NotAnEntryPointException;
+use Symfony\Component\Security\Http\RequestSupport;
 
 /**
  * This class decorates internal authenticators to add the LDAP integration.
@@ -44,9 +45,9 @@ public function __construct(
     ) {
     }
 
-    public function supports(Request $request): ?bool
+    public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool
     {
-        return $this->authenticator->supports($request);
+        return $this->authenticator->supports($request, $requestSupport);
     }
 
     public function authenticate(Request $request): Passport
diff --git a/src/Symfony/Component/Ldap/Tests/Security/CheckLdapCredentialsListenerTest.php b/src/Symfony/Component/Ldap/Tests/Security/CheckLdapCredentialsListenerTest.php
@@ -33,6 +33,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Contracts\Service\ServiceLocatorTrait;
 
 class CheckLdapCredentialsListenerTest extends TestCase
@@ -206,7 +207,7 @@ private function createListener()
 if (interface_exists(AuthenticatorInterface::class)) {
     class TestAuthenticator implements AuthenticatorInterface
     {
-        public function supports(Request $request): ?bool
+        public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool
         {
         }
 
diff --git a/src/Symfony/Component/Security/Http/Authenticator/AbstractLoginFormAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/AbstractLoginFormAuthenticator.php
@@ -16,6 +16,7 @@
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Component\Security\Http\SecurityRequestAttributes;
 
 /**
@@ -36,10 +37,26 @@ abstract protected function getLoginUrl(Request $request): string;
      *
      * This default implementation handles all POST requests to the
      * login path (@see getLoginUrl()).
+     *
+     * @param RequestSupport|null $requestSupport
      */
-    public function supports(Request $request): bool
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): bool
     {
-        return $request->isMethod('POST') && $this->getLoginUrl($request) === $request->getBaseUrl().$request->getPathInfo();
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
+        if (!$request->isMethod('POST')) {
+            $requestSupport?->addReason('Request is not a POST.');
+
+            return false;
+        }
+
+        if ($this->getLoginUrl($request) !== $request->getBaseUrl().$request->getPathInfo()) {
+            $requestSupport?->addReason('Request does not match the login URL.');
+
+            return false;
+        }
+
+        return true;
     }
 
     /**
diff --git a/src/Symfony/Component/Security/Http/Authenticator/AbstractPreAuthenticatedAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/AbstractPreAuthenticatedAuthenticator.php
@@ -24,6 +24,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
+use Symfony\Component\Security\Http\RequestSupport;
 
 /**
  * The base authenticator for authenticators to use pre-authenticated
@@ -52,20 +53,27 @@ public function __construct(
      */
     abstract protected function extractUsername(Request $request): ?string;
 
-    public function supports(Request $request): ?bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool
     {
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
         try {
             $username = $this->extractUsername($request);
         } catch (BadCredentialsException $e) {
             $this->clearToken($e);
 
             $this->logger?->debug('Skipping pre-authenticated authenticator as a BadCredentialsException is thrown.', ['exception' => $e, 'authenticator' => static::class]);
+            $requestSupport?->addReason('Could not find the username in the request.');
 
             return false;
         }
 
         if (null === $username) {
             $this->logger?->debug('Skipping pre-authenticated authenticator no username could be extracted.', ['authenticator' => static::class]);
+            $requestSupport?->addReason('Username found in the request was empty.');
 
             return false;
         }
@@ -75,6 +83,7 @@ public function supports(Request $request): ?bool
 
         if ($token instanceof PreAuthenticatedToken && $this->firewallName === $token->getFirewallName() && $token->getUserIdentifier() === $username) {
             $this->logger?->debug('Skipping pre-authenticated authenticator as the user already has an existing session.', ['authenticator' => static::class]);
+            $requestSupport?->addReason('A token already exists for the user in the session.');
 
             return false;
         }
diff --git a/src/Symfony/Component/Security/Http/Authenticator/AccessTokenAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/AccessTokenAuthenticator.php
@@ -24,6 +24,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
 use Symfony\Component\Security\Http\Authenticator\Token\PostAuthenticationToken;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Contracts\Translation\TranslatorInterface;
 
 /**
@@ -46,9 +47,20 @@ public function __construct(
     ) {
     }
 
-    public function supports(Request $request): ?bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool
     {
-        return null === $this->accessTokenExtractor->extractAccessToken($request) ? false : null;
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
+        if (null === $this->accessTokenExtractor->extractAccessToken($request)) {
+            $requestSupport?->addReason(sprintf('No token was found in the request by the %s.', $this->accessTokenExtractor::class));
+
+            return false;
+        }
+
+        return null;
     }
 
     public function authenticate(Request $request): Passport
diff --git a/src/Symfony/Component/Security/Http/Authenticator/AuthenticatorInterface.php b/src/Symfony/Component/Security/Http/Authenticator/AuthenticatorInterface.php
@@ -16,6 +16,7 @@
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
+use Symfony\Component\Security\Http\RequestSupport;
 
 /**
  * The interface for all authenticators.
@@ -32,8 +33,10 @@ interface AuthenticatorInterface
      * If this returns true, authenticate() will be called. If false, the authenticator will be skipped.
      *
      * Returning null means authenticate() can be called lazily when accessing the token storage.
+     *
+     * @param RequestSupport|null $requestSupport
      */
-    public function supports(Request $request): ?bool;
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool;
 
     /**
      * Create a passport for the current request.
diff --git a/src/Symfony/Component/Security/Http/Authenticator/Debug/TraceableAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/Debug/TraceableAuthenticator.php
@@ -21,6 +21,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
 use Symfony\Component\Security\Http\EntryPoint\Exception\NotAnEntryPointException;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Component\VarDumper\Caster\ClassStub;
 
 /**
@@ -31,6 +32,7 @@
 final class TraceableAuthenticator implements AuthenticatorInterface, InteractiveAuthenticatorInterface, AuthenticationEntryPointInterface
 {
     private ?bool $supports = false;
+    private array $supportReasons = [];
     private ?Passport $passport = null;
     private ?float $duration = null;
     private ClassStub|string $stub;
@@ -45,6 +47,7 @@ public function getInfo(): array
     {
         return [
             'supports' => $this->supports,
+            'supportReasons' => $this->supportReasons,
             'passport' => $this->passport,
             'duration' => $this->duration,
             'stub' => $this->stub ??= class_exists(ClassStub::class) ? new ClassStub($this->authenticator::class) : $this->authenticator::class,
@@ -62,9 +65,24 @@ static function (BadgeInterface $badge): array {
         ];
     }
 
-    public function supports(Request $request): ?bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool
     {
-        return $this->supports = $this->authenticator->supports($request);
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : new RequestSupport();
+
+        $this->supports = $this->authenticator->supports($request, $requestSupport);
+        $this->supportReasons = $requestSupport->reasons;
+
+        if ($this->supports === false) {
+            $requestSupport->result = false;
+        } else {
+            $requestSupport->result = true;
+            $requestSupport->lazy = null === $this->supports;
+        }
+
+        return $this->supports;
     }
 
     public function authenticate(Request $request): Passport
diff --git a/src/Symfony/Component/Security/Http/Authenticator/FormLoginAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/FormLoginAuthenticator.php
@@ -31,6 +31,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\HttpUtils;
 use Symfony\Component\Security\Http\ParameterBagUtils;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Component\Security\Http\SecurityRequestAttributes;
 
 /**
@@ -68,11 +69,32 @@ protected function getLoginUrl(Request $request): string
         return $this->httpUtils->generateUri($request, $this->options['login_path']);
     }
 
-    public function supports(Request $request): bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): bool
     {
-        return ($this->options['post_only'] ? $request->isMethod('POST') : true)
-            && $this->httpUtils->checkRequestPath($request, $this->options['check_path'])
-            && ($this->options['form_only'] ? 'form' === $request->getContentTypeFormat() : true);
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
+        if ($this->options['post_only'] && !$request->isMethod('POST')) {
+            $requestSupport?->addReason('Request is not a POST while "post_only" is set.');
+
+            return false;
+        }
+
+        if (!$this->httpUtils->checkRequestPath($request, $this->options['check_path'])) {
+            $requestSupport?->addReason('Request does not match the "check_path".');
+
+            return false;
+        }
+
+        if ($this->options['form_only'] && 'form' !== $request->getContentTypeFormat()) {
+            $requestSupport?->addReason('Request is not a form submission while "form_only" is set.');
+
+            return false;
+        }
+
+        return true;
     }
 
     public function authenticate(Request $request): Passport
diff --git a/src/Symfony/Component/Security/Http/Authenticator/HttpBasicAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/HttpBasicAuthenticator.php
@@ -24,6 +24,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
+use Symfony\Component\Security\Http\RequestSupport;
 
 /**
  * @author Wouter de Jong <wouter@wouterj.nl>
@@ -49,9 +50,20 @@ public function start(Request $request, ?AuthenticationException $authException
         return $response;
     }
 
-    public function supports(Request $request): ?bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool
     {
-        return $request->headers->has('PHP_AUTH_USER');
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
+        if (!$request->headers->has('PHP_AUTH_USER')) {
+            $requestSupport?->addReason('Request has no basic authentication header.');
+
+            return false;
+        }
+
+        return true;
     }
 
     public function authenticate(Request $request): Passport
diff --git a/src/Symfony/Component/Security/Http/Authenticator/JsonLoginAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/JsonLoginAuthenticator.php
@@ -31,6 +31,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\HttpUtils;
+use Symfony\Component\Security\Http\RequestSupport;
 use Symfony\Contracts\Translation\TranslatorInterface;
 
 /**
@@ -60,16 +61,25 @@ public function __construct(
         $this->propertyAccessor = $propertyAccessor ?: PropertyAccess::createPropertyAccessor();
     }
 
-    public function supports(Request $request): ?bool
+    /**
+     * @param RequestSupport|null $requestSupport
+     */
+    public function supports(Request $request, /* ?RequestSupport $requestSupport = null */): ?bool
     {
+        $requestSupport = 2 <= \func_num_args() ? func_get_arg(1) : null;
+
         if (
             !str_contains($request->getRequestFormat() ?? '', 'json')
             && !str_contains($request->getContentTypeFormat() ?? '', 'json')
         ) {
+            $requestSupport?->addReason('Request format is not JSON.');
+
             return false;
         }
 
         if (isset($this->options['check_path']) && !$this->httpUtils->checkRequestPath($request, $this->options['check_path'])) {
+            $requestSupport?->addReason('Request does not match the "check_path".');
+
             return false;
         }
 
diff --git a/src/Symfony/Component/Security/Http/Authenticator/LoginLinkAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/LoginLinkAuthenticator.php
diff --git a/src/Symfony/Component/Security/Http/Authenticator/RememberMeAuthenticator.php b/src/Symfony/Component/Security/Http/Authenticator/RememberMeAuthenticator.php
diff --git a/src/Symfony/Component/Security/Http/CHANGELOG.md b/src/Symfony/Component/Security/Http/CHANGELOG.md
diff --git a/src/Symfony/Component/Security/Http/RequestSupport.php b/src/Symfony/Component/Security/Http/RequestSupport.php
diff --git a/src/Symfony/Component/Security/Http/Tests/Authenticator/AbstractAuthenticatorTest.php b/src/Symfony/Component/Security/Http/Tests/Authenticator/AbstractAuthenticatorTest.php
diff --git a/src/Symfony/Component/Security/Http/Tests/Fixtures/DummyAuthenticator.php b/src/Symfony/Component/Security/Http/Tests/Fixtures/DummyAuthenticator.php
diff --git a/src/Symfony/Component/Security/Http/Tests/Fixtures/DummySupportsAuthenticator.php b/src/Symfony/Component/Security/Http/Tests/Fixtures/DummySupportsAuthenticator.php

Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,7 @@`
`28`	`28`	`use Symfony\Component\Security\Http\Authenticator\Passport\Passport;`
`29`	`29`	`use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;`
`30`	`30`	`use Symfony\Component\Security\Http\Firewall\ExceptionListener;`
	`31`	`+use Symfony\Component\Security\Http\RequestSupport;`
`31`	`32`
`32`	`33`	`class RegisterEntryPointsPassTest extends TestCase`
`33`	`34`	`{`
`@@ -71,7 +72,7 @@ public function testProcessResolvesChildDefinitionsClass()`
`71`	`72`
`72`	`73`	`class CustomAuthenticator extends AbstractAuthenticator implements AuthenticationEntryPointInterface`
`73`	`74`	`{`
`74`		`- public function supports(Request $request): ?bool`
	`75`	`+ public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool`
`75`	`76`	`{`
`76`	`77`	`return false;`
`77`	`78`	`}`
Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,7 @@`
`38`	`38`	`use Symfony\Component\Security\Http\Authenticator\AuthenticatorInterface;`
`39`	`39`	`use Symfony\Component\Security\Http\Authenticator\HttpBasicAuthenticator;`
`40`	`40`	`use Symfony\Component\Security\Http\Authenticator\Passport\Passport;`
	`41`	`+use Symfony\Component\Security\Http\RequestSupport;`
`41`	`42`
`42`	`43`	`class SecurityExtensionTest extends TestCase`
`43`	`44`	`{`
`@@ -959,7 +960,7 @@ protected function getContainer()`
`959`	`960`
`960`	`961`	`class TestAuthenticator implements AuthenticatorInterface`
`961`	`962`	`{`
`962`		`- public function supports(Request $request): ?bool`
	`963`	`+ public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool`
`963`	`964`	`{`
`964`	`965`	`}`
`965`	`966`
Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,7 @@`
`22`	`22`	`use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;`
`23`	`23`	`use Symfony\Component\Security\Http\Authenticator\Passport\Passport;`
`24`	`24`	`use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;`
	`25`	`+use Symfony\Component\Security\Http\RequestSupport;`
`25`	`26`
`26`	`27`	`class ApiAuthenticator extends AbstractAuthenticator`
`27`	`28`	`{`
`@@ -32,7 +33,7 @@ public function __construct(bool $selfLoadingUser = false)`
`32`	`33`	`$this->selfLoadingUser = $selfLoadingUser;`
`33`	`34`	`}`
`34`	`35`
`35`		`- public function supports(Request $request): ?bool`
	`36`	`+ public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool`
`36`	`37`	`{`
`37`	`38`	`return $request->headers->has('X-USER-EMAIL');`
`38`	`39`	`}`
Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,7 @@`
`20`	`20`	`use Symfony\Component\Security\Http\Authenticator\Passport\Passport;`
`21`	`21`	`use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;`
`22`	`22`	`use Symfony\Component\Security\Http\EntryPoint\Exception\NotAnEntryPointException;`
	`23`	`+use Symfony\Component\Security\Http\RequestSupport;`
`23`	`24`
`24`	`25`	`/**`
`25`	`26`	`* This class decorates internal authenticators to add the LDAP integration.`
`@@ -44,9 +45,9 @@ public function __construct(`
`44`	`45`	`) {`
`45`	`46`	`}`
`46`	`47`
`47`		`- public function supports(Request $request): ?bool`
	`48`	`+ public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool`
`48`	`49`	`{`
`49`		`- return $this->authenticator->supports($request);`
	`50`	`+ return $this->authenticator->supports($request, $requestSupport);`
`50`	`51`	`}`
`51`	`52`
`52`	`53`	`public function authenticate(Request $request): Passport`
Original file line number	Diff line number	Diff line change
`@@ -33,6 +33,7 @@`
`33`	`33`	`use Symfony\Component\Security\Http\Authenticator\Passport\Passport;`
`34`	`34`	`use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;`
`35`	`35`	`use Symfony\Component\Security\Http\Event\CheckPassportEvent;`
	`36`	`+use Symfony\Component\Security\Http\RequestSupport;`
`36`	`37`	`use Symfony\Contracts\Service\ServiceLocatorTrait;`
`37`	`38`
`38`	`39`	`class CheckLdapCredentialsListenerTest extends TestCase`
`@@ -206,7 +207,7 @@ private function createListener()`
`206`	`207`	`if (interface_exists(AuthenticatorInterface::class)) {`
`207`	`208`	`class TestAuthenticator implements AuthenticatorInterface`
`208`	`209`	`{`
`209`		`- public function supports(Request $request): ?bool`
	`210`	`+ public function supports(Request $request, ?RequestSupport $requestSupport = null): ?bool`
`210`	`211`	`{`
`211`	`212`	`}`
`212`	`213`