v8.2.0-BETA1

Changelog (v8.1.11...v8.2.0-BETA1)

• bug #67723 Do not request a re-authentication that cannot prove a recent authentication (@BenMacha)
• minor #67244 Improve the descriptions of the types and attributes registered for autoconfiguration (@nicolas-grekas)
• feature #66999 Start a re-authentication for remember-me users when a vote asks for it (@nicolas-grekas)
• minor #66809 Make login links and signed remember-me cookies follow the clock (@nicolas-grekas)
• minor #66832 Use DateTimeImmutable::createFromTimestamp() to build dates from timestamps (@nicolas-grekas)
• bug #66763 Keep null in the serialization example of PasswordAuthenticatedUserInterface (@nicolas-grekas)
• bug #66764 Deny the authentication attributes to guests instead of throwing (@nicolas-grekas)
• feature #66630 Add ConstantFunctionProvider and deprecate the unrestricted constant() and enum() (@nicolas-grekas)
• feature #66652 Compile expressions when warming up the cache (@nicolas-grekas)
• minor #66566 Improve the hints shown by debug:autowiring (@nicolas-grekas)
• feature #66506 Allow rotating the secrets that sign URIs, remember-me cookies, login links and messages (@nicolas-grekas)
• bug #66483 Start a re-authentication for a check made by an allow_if expression or an # closure (@nicolas-grekas)
• feature #66242 Let voters tell which denials a re-authentication can cure (@nicolas-grekas)
• feature #66066 Add IS_AUTHENTICATED_VERY_RECENTLY, decided by the trust resolver (@nicolas-grekas)
• feature #66065 Record which authentication methods were proven, and when (@nicolas-grekas)
• feature #66117 Add CheckRefreshedUserEvent to extend the user-change checks (@kbond)
• feature #66035 Decide IS_AUTHENTICATED_RECENTLY through the trust resolver (@nicolas-grekas)
• feature #66014 Add IS_AUTHENTICATED_RECENTLY to require a fresh authentication (@nicolas-grekas)
• bug #65908 Harden the oidc_login authenticator against malformed provider data and mix-up attacks (@welcoMattic)
• feature #65865 Make the OAuth2 introspection token handler usable (@Spomky)
• feature #65821 Add a current_user() function to the expression language provider (@seb-jean)
• feature #65827 Deprecate passing more than one attribute to AccessDecisionManager::decide() (@Amoifr)
• feature #61938 Allow AuthorizationChecker::isGrantedForUser to check for guest permissions (@aschempp)
• feature #65817 Add OIDC claims source, user-identifier mapping and RP-Initiated Logout (@welcoMattic)
• feature #64954 Add an OIDC Authorization Code Flow authenticator (@welcoMattic)
• feature #64271 Allow passing extra signed parameters in the login link URL (@janklan)
• feature #65345 Add a debug:roles command to inspect the role hierarchy (@squrious)
• feature #52099 Allow wildcards as placeholders in the role hierarchy (@squrious)
• feature #61786 add role hierarchy graph to profiler security panel (@damienfern)
• minor #64963 Update a stale comment (@javiereguiluz)