Skip to content

7.81.0

Choose a tag to compare

@spryker-release-bot spryker-release-bot released this 23 Jul 11:56
· 6 commits to master since this release

Included commits: 7.80.2...7.81.0

Improvements

  • Extended CustomerFacadeInterface::getCustomer() with an optional $isSecure parameter; when true (default), the password hash is excluded from the returned transfer to improve authentication security.
  • Introduced CustomerClientInterface::getCustomerForAuthentication() to retrieve the customer including the password hash exclusively for authentication contexts.
  • Adjusted CustomerSession::setCustomer() and setCustomerRawData() to exclude the password hash from the session to improve authentication security.
  • Adjusted AbstractSpyCustomer::toArray() to strip the password field by default, and AbstractSpyCustomer::setPassword() to guard against accidental null overwrites on existing entities.