Included commits: 3.31.0...3.32.0
Improvements
- Adjusted
User::setCurrentUser()to exclude the password hash before storing the user transfer in the session to improve authentication security. - Adjusted
CurrentPasswordValidatorto fetch a fresh user from the database instead of relying on session data for current password validation, ensuring up-to-date credential checks. - Fixed
CurrentUserSessionHandlerListenerto verify the existence of a current user before processing to prevent errors on unauthenticated requests.