Skip to content

Release v1.17.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 06:02
· 17 commits to main since this release
v1.17.0
2625ade

Release v1.17.0

Changelog

Changed

  • Magic login confirm interstitial (closes #9): MagicLoginConfirmType with Form CSRF; GET magic_login_check only; POST magic_login_confirm validates CSRF, consumes the login link, then Security::login(..., 'login_link'). Stock confirm Twig uses form_start / form_end (REQ-TWIG-005; no plain <form).
  • nowo:auth-kit:configure-security adds public access_control for magic_login_confirm when confirm_interstitial is enabled.

Documentation

  • MAGIC-LOGIN / CONFIGURATION / UPGRADING: confirm Form CSRF flow.

What's Changed

  • Magic login confirm: FormType + real CSRF before login by @HecFranco in #10

New Contributors

Full Changelog: v1.16.0...v1.17.0

Contributors

HecFranco
Assets 2
Loading