Skip to content

3.32.0

Latest

Choose a tag to compare

@spryker-release-bot spryker-release-bot released this 23 Jul 11:56

Included commits: 3.31.0...3.32.0

Improvements

  • Adjusted User::setCurrentUser() to exclude the password hash before storing the user transfer in the session to improve authentication security.
  • Adjusted CurrentPasswordValidator to fetch a fresh user from the database instead of relying on session data for current password validation, ensuring up-to-date credential checks.
  • Fixed CurrentUserSessionHandlerListener to verify the existence of a current user before processing to prevent errors on unauthenticated requests.