mark the RememberMeDetails class as final

xabbuh · xabbuh · commit 390713b0bf29 · 2025-09-19T10:49:38.000+02:00
diff --git a/UPGRADE-7.4.md b/UPGRADE-7.4.md
@@ -85,6 +85,7 @@ Routing
 Security
 --------
 
+ * Mark the `RememberMeDetails` class as `final`
  * Deprecate callable firewall listeners, extend `AbstractListener` or implement `FirewallListenerInterface` instead
  * Deprecate `AbstractListener::__invoke`
  * Deprecate `LazyFirewallContext::__invoke()`
diff --git a/src/Symfony/Component/Security/Http/CHANGELOG.md b/src/Symfony/Component/Security/Http/CHANGELOG.md
@@ -4,6 +4,7 @@ CHANGELOG
 7.4
 ---
 
+ * Mark the `RememberMeDetails` class as `final`
  * Add support for union types with `#[CurrentUser]`
  * Deprecate callable firewall listeners, extend `AbstractListener` or implement `FirewallListenerInterface` instead
  * Deprecate `AbstractListener::__invoke`
diff --git a/src/Symfony/Component/Security/Http/RememberMe/RememberMeDetails.php b/src/Symfony/Component/Security/Http/RememberMe/RememberMeDetails.php
@@ -16,6 +16,8 @@
 
 /**
  * @author Wouter de Jong <wouter@wouterj.nl>
+ *
+ * @final since Symfony 7.4
  */
 class RememberMeDetails
 {
@@ -89,7 +91,7 @@ public static function fromRawCookie(string $rawCookie): self
             throw new AuthenticationException('The user identifier contains a character from outside the base64 alphabet.');
         }
 
-        if ('' === $cookieParts[0]) {
+        if ('' === $cookieParts[0] && (self::class === static::class || self::class === (new \ReflectionMethod(static::class, '__construct'))->class)) {
             unset($cookieParts[0]);
         } else {
             $cookieParts[0] = strtr($cookieParts[0], '.', '\\');
