Skip to content

Release v1.15.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 05:10
· 21 commits to main since this release
v1.15.0
186728c

v1.15.0: #[Encrypted] on social credential secret and account tokens

Changelog

Security

  • Encrypt OAuth secrets at rest with nowo-tech/doctrine-encrypt-bundle: SocialLoginCredential::$clientSecret and SocialLoginAccount::$accessToken / $refreshToken use #[Encrypted]. Hosts must configure Halite (same as other encrypted fields). Existing plaintext rows decrypt as-is until the next flush or doctrine:encrypt:database.

Changed

  • Composer: require nowo-tech/doctrine-encrypt-bundle ^2.3.

Full Changelog: v1.14.0...v1.15.0

Assets 2
Loading