Added workaround for phalcon/cphalcon#14346

app/Helpers.php

@@ -4,11 +4,12 @@
 namespace Vokuro;
 
 use Phalcon\Di;
+use Phalcon\Di\DiInterface;
 
 /**
  * Call Dependency Injection container
  *
- * @return mixed
+ * @return mixed|null|DiInterface
  */
 function container()
 {

app/Phalcon/Beta2FixSecurity.php

@@ -0,0 +1,44 @@
+<?php
+declare(strict_types=1);
+
+namespace Phalcon;
+
+use function Vokuro\container;
+
+/**
+ * Extended class for fixing phalcon/cphalcon#14346 issue
+ *
+ * @see https://github.com/phalcon/cphalcon/pull/14347
+ */
+class Beta2FixSecurity extends Security
+{
+    /**
+     * @inheritDoc
+     */
+    public function getRequestToken(): string
+    {
+        if (empty($this->requestToken)) {
+            return $this->getSessionToken();
+        }
+
+        return (string) $this->requestToken;
+    }
+
+    /**
+     * @inheritDoc
+     *
+     * @return string
+     * @throws Exception
+     */
+    public function getSessionToken(): string
+    {
+        if (!container()->has('session')) {
+            throw new Exception(
+                Exception::containerServiceNotFound("the 'session' service")
+            );
+        }
+
+        $session = container()->getShared('session');
+        return (string) $session->get($this->tokenValueSessionId);
+    }
+}

app/Providers/SecurityProvider.php

@@ -12,9 +12,11 @@
 
 namespace Vokuro\Providers;
 
+use Phalcon\Beta2FixSecurity;
 use Phalcon\Di\DiInterface;
 use Phalcon\Di\ServiceProviderInterface;
 use Phalcon\Security;
+use Phalcon\Version;
 
 class SecurityProvider implements ServiceProviderInterface
 {
@@ -29,15 +31,30 @@ class SecurityProvider implements ServiceProviderInterface
      */
     public function register(DiInterface $di): void
     {
-        $di->set($this->providerName, function () use ($di) {
+        $that = $this;
+        $di->set($this->providerName, function () use ($di, $that) {
+            return $that->getSecurity($di);
+        });
+    }
+
+    /**
+     * Remove current method after after next release of Phalcon 4
+     *
+     * @see https://github.com/phalcon/cphalcon/issues/14346
+     *
+     * @param DiInterface $di
+     * @return Security
+     */
+    protected function getSecurity(DiInterface $di): Security
+    {
+        if (Version::get() !== '4.0.0-beta.2') {
             $security = new Security();
-            $security->setDI($di);
+        } else {
+            $security = new Beta2FixSecurity();
+        }
 
-            // Initialize session.
-            $security->getTokenKey();
-            $security->getToken();
+        $security->setDI($di);
 
-            return $security;
-        });
+        return $security;
     }
 }