7.81.0
·
6 commits
to master
since this release
Included commits: 7.80.2...7.81.0
Improvements
- Extended
CustomerFacadeInterface::getCustomer()with an optional$isSecureparameter; whentrue(default), the password hash is excluded from the returned transfer to improve authentication security. - Introduced
CustomerClientInterface::getCustomerForAuthentication()to retrieve the customer including the password hash exclusively for authentication contexts. - Adjusted
CustomerSession::setCustomer()andsetCustomerRawData()to exclude the password hash from the session to improve authentication security. - Adjusted
AbstractSpyCustomer::toArray()to strip the password field by default, andAbstractSpyCustomer::setPassword()to guard against accidental null overwrites on existing entities.