7.80.0
·
9 commits
to master
since this release
Included commits: 7.79.0...7.80.0
Improvements
- Introduced
CustomerClientInterface::getCustomerForAuthentication()to retrieve customer data including the password hash exclusively for authentication contexts, keeping credential validation separate from general customer data retrieval. - Extended
CustomerFacadeInterface::getCustomer()with an optional$isSecureparameter (defaults totrue) to exclude the password hash from the returnedCustomerTransferby default, ensuring credentials are not inadvertently exposed outside authentication flows. - Adjusted
update(),updatePassword(),findCustomerByReference(), andresolveCustomer()to strip the password hash from returned transfers, ensuring credentials are excluded from customer data used outside of authentication.