Skip to content

7.80.0

Choose a tag to compare

@spryker-release-bot spryker-release-bot released this 25 Jun 12:34
· 9 commits to master since this release

Included commits: 7.79.0...7.80.0

Improvements

  • Introduced CustomerClientInterface::getCustomerForAuthentication() to retrieve customer data including the password hash exclusively for authentication contexts, keeping credential validation separate from general customer data retrieval.
  • Extended CustomerFacadeInterface::getCustomer() with an optional $isSecure parameter (defaults to true) to exclude the password hash from the returned CustomerTransfer by default, ensuring credentials are not inadvertently exposed outside authentication flows.
  • Adjusted update(), updatePassword(), findCustomerByReference(), and resolveCustomer() to strip the password hash from returned transfers, ensuring credentials are excluded from customer data used outside of authentication.