symfony/security
Abandoned by its maintainers. Provides a complete security system for your web application
v4.4.50
25M downloads/mo
#2453 most downloaded on Packagist
symfony/security
What this package is like to depend on
Last release 4 years ago
no release in 18 months
Ships fairly regularly
a new release about every 5 weeks
Rarely documented
notes for 26 of 433 stable releases
Nothing withdrawn
no release was ever pulled
15 years old
476 releases · first in 2011
0 releases in the last 12 months
see the full history below
Release timeline
419 releases · Sep 2011 to Jan 2023Releases
latest 60 of 476-
v4.4.5024 Jan 2023 -
v4.4.4822 Oct 2022Release notes
Open source →Changelog (v4.4.47...v4.4.48)
- bug #47932 Throw LogicException instead of Error when trying to generate logout-… (addiks)
-
v4.4.4701 Oct 2022 -
v4.4.4623 Sep 2022Release notes
Open source →Changelog (v4.4.45...v4.4.46)
- bug #47578 Fix AbstractFormLoginAuthenticator return types (AndrolGenhald)
-
v4.4.4426 Jul 2022Release notes
Open source →Changelog (v4.4.43...v4.4.44)
- bug #47069 Allow redirect after login to absolute URLs (Tim Ward)
-
v4.4.4213 May 2022Release notes
Open source →Changelog (v4.4.41...v4.4.42)
- bug #46317 Ignore invalid URLs found in failure/success paths (nicolas-grekas)
- bug #46262 Fix removing listeners when using first-class callable syntax (javer)
-
v4.4.4114 Apr 2022 -
v4.4.3813 Feb 2022Release notes
Open source →Changelog (v4.4.37...v4.4.38)
- bug #44259 AccountStatusException::$user should be nullable (Cantepie)
-
v4.4.3702 Jan 2022 -
v4.4.3623 Dec 2021 -
v4.4.3415 Nov 2021Nothing published for this version
-
v4.4.3323 Oct 2021Nothing published for this version
-
v4.4.3120 Sep 2021Nothing published for this version
-
v4.4.3018 Aug 2021Nothing published for this version
-
v4.4.2927 Jul 2021Nothing published for this version
-
v4.4.2721 Jul 2021Nothing published for this version
-
v4.4.2623 Jun 2021Nothing published for this version
-
v4.4.2526 May 2021Nothing published for this version
-
v4.4.2419 May 2021Nothing published for this version
-
v4.4.2312 May 2021Nothing published for this version
-
v4.4.2230 Apr 2021Nothing published for this version
-
v4.4.2112 Mar 2021Nothing published for this version
-
v4.4.2003 Mar 2021Nothing published for this version
-
v4.4.1927 Jan 2021Nothing published for this version
-
v4.4.1817 Dec 2020Nothing published for this version
-
v4.4.1727 Nov 2020Nothing published for this version
-
v4.4.1628 Oct 2020Nothing published for this version
-
v4.4.1504 Oct 2020Nothing published for this version
-
v4.4.1402 Sep 2020Nothing published for this version
-
v4.4.1317 Aug 2020Nothing published for this version
-
v4.4.12no dateNothing published for this version
-
v4.4.1130 May 2020Nothing published for this version
-
v4.4.10no dateNothing published for this version
-
v4.4.9no dateNothing published for this version
-
v4.4.821 Apr 2020Nothing published for this version
-
v4.4.730 Mar 2020Nothing published for this version
-
v4.4.623 Mar 2020Nothing published for this version
-
v4.4.526 Feb 2020Nothing published for this version
-
v4.4.431 Jan 2020Nothing published for this version
-
v4.4.321 Jan 2020Nothing published for this version
-
v4.4.216 Dec 2019Nothing published for this version
-
v4.4.101 Dec 2019Nothing published for this version
-
v4.4.020 Nov 2019Release notes
Open source →- Deprecated class
LdapUserProvider, useSymfony\Component\Ldap\Security\LdapUserProviderinstead - Added method
needsRehash()toPasswordEncoderInterfaceandUserPasswordEncoderInterface - Added
MigratingPasswordEncoder - Added and implemented
PasswordUpgraderInterface, for opportunistic password migrations - Added
Guard\PasswordAuthenticatedInterface, an optional interface for "guard" authenticators that deal with user passwords - Marked all dispatched event classes as
@final - Deprecated returning a non-boolean value when implementing
Guard\AuthenticatorInterface::checkCredentials(). - Deprecated passing more than one attribute to
AccessDecisionManager::decide()andAuthorizationChecker::isGranted() - Added new
argon2idencoder, undeprecated thebcryptandargon2iones (usingautois still recommended by default.) - Added
AbstractListenerwhich replaces the deprecatedListenerInterface
- Deprecated class
-
v4.4.0-RC114 Nov 2019 pre-releaseNothing published for this version
-
v4.4.0-BETA213 Nov 2019 pre-releaseNothing published for this version
-
v4.4.0-BETA112 Nov 2019 pre-releaseNothing published for this version
-
v4.3.1131 Jan 2020Nothing published for this version
-
v4.3.1021 Jan 2020Nothing published for this version
-
v4.3.930 Nov 2019Nothing published for this version
-
v4.3.812 Nov 2019Nothing published for this version
-
v4.3.730 Oct 2019Nothing published for this version
-
v4.3.6no dateNothing published for this version
-
v4.3.504 Oct 2019Nothing published for this version
-
v4.3.426 Aug 2019Nothing published for this version
-
v4.3.324 Jul 2019Nothing published for this version
-
v4.3.226 Jun 2019Nothing published for this version
-
v4.3.105 Jun 2019Nothing published for this version
-
v4.3.027 May 2019Release notes
Open source →- Added methods
__serializeand__unserializeto theTokenInterface - Added
SodiumPasswordEncoderandNativePasswordEncoder - The
RoleandSwitchUserRoleclasses are deprecated and will be removed in 5.0. Use strings for roles instead. - The
getReachableRoles()method of theRoleHierarchyInterfaceis deprecated and will be removed in 5.0. Role hierarchies must implement thegetReachableRoleNames()method instead and return roles as strings. - The
getRoles()method of theTokenInterfaceis deprecated. Tokens must implement thegetRoleNames()method instead and return roles as strings. - Made the
serialize()andunserialize()methods ofAbstractTokenandAuthenticationExceptionfinal, use__serialize()/__unserialize()instead AuthenticationExceptiondoesn't implementSerializableanymore- Deprecated the
ListenerInterface, turn your listeners into callables instead - Deprecated
Firewall::handleRequest(), useFirewall::callListeners()instead - Dispatch
AuthenticationSuccessEventonsecurity.authentication.success - Dispatch
AuthenticationFailureEventonsecurity.authentication.failure - Dispatch
InteractiveLoginEventonsecurity.interactive_login - Dispatch
SwitchUserEventonsecurity.switch_user - Deprecated
Argon2iPasswordEncoder, useSodiumPasswordEncoderinstead - Deprecated
BCryptPasswordEncoder, useNativePasswordEncoderinstead - Added
DeauthenticatedEventdispatched in case the user has changed when trying to refresh the token
- Added methods
-
v4.3.0-RC1no date pre-releaseNothing published for this version
-
v4.3.0-BETA221 May 2019 pre-releaseNothing published for this version