User Bundle Laravel Package

• Convert XML config files to other formats to fix the deprecation of XML config files in Symfony
• Add PHP routing files alongside the XML ones. Loading the XML routing files triggers a deprecation in Symfony 7.4.
• Fix deprecation in the UserChecker
• Fix the HashingPasswordUpdater to avoid trigger deprecations for UserInterface::eraseCredentials
• Deprecate \FOS\UserBundle\Model\User::eraseCredentials
• Remove support for Symfony < 7.3
• Remove support for PHP < 8.2

• [BC break] Removed the CouchDB ODM integration
• [BC break] Added return types in most methods
• [BC break] Marked classes as final when they were [@final](https://github.com/final)
• Removed support for symfony <6.4
• Removed support for PHP <8.1
• Remove the mailer implementation based on Swiftmailer
• Added support for Symfony 7

What's Changed

• Deprecated the TwigSwiftMailer implementation

Full Changelog: https://github.com/FriendsOfSymfony/FOSUserBundle/compare/v3.3.0...v3.4.0

• Added a mailer implementation based on symfony/mailer and Twig
• Added tentative return types in most methods
• Deprecated the CouchDB ODM integration as the ODM is unmaintained

• Fixed remaining deprecations with Symfony 6.3

• Fixed deprecations with Symfony 6.3
• Fixed deprecations with Doctrine ORM (requires using DoctrineBundle 2.10.1 or newer for the fix to be effective)
• Fixed the way to access the session when enabling confirmation emails
• Fixed the way to access the firewall name when enabling the registration feature

Added support for Symfony 6

• Fixed support for the remember-me in the programmatic login when using the new authentication system of Symfony.
• Fixed some deprecations when using Symfony 5.4.

• Fixed the wiring of controllers to avoid a deprecation warning when using Twig.

• [BC break] Change the base class of controllers to use the AbstractController (but extending the controllers is not officially supported anymore).
• [BC break] Remove the group feature
• [BC break] Change the base class for events to Symfony\Contracts\EventDispatcher\Event instead of Symfony\Component\EventDispatcher\Event
• [BC break] Remove the Symfony\Component\Security\Core\User\AdvancedUserInterface methods from our UserInterface
• [BC break] The ResettingListener now longer blocks password resetting requests based on the isAccountNonLocked method of the AdvancedUserInterface. Projects customizing isAccountNonLocked for that purpose should instead register their own listener for the FOSUserEvents::RESETTING_RESET_REQUEST event to set a response instead of processing the request.
• [BC break] Made \FOS\UserBundle\Model\User::serialize and \FOS\UserBundle\Model\User::unserialize final. Child classes needing to extend the serialization must override __serialize and __unserialize instead.
• [BC break] \FOS\UserBundle\Event\GetResponseNullableUserEvent no longer inherits from \FOS\UserBundle\Event\GetResponseUserEvent and \FOS\UserBundle\Event\UserEvent as that was breaking variance rules.
• [BC break] A few methods of FOS\UserBundle\Model\User now have return types (in methods where Symfony 6 requires them)
• [BC break] The legacy mailer based on SwiftMailer and symfony/templating is no longer used by default. Selecting a mailer service is now mandatory when using a feature needing the mailer.
• [BC break] Remove the legacy mailer based on SwiftMailer and symfony/templating. Use fos_user.mailer.twig_swift or a custom mailer service.
• Add support for Symfony 5.
• Add return types in most methods.
• Add autowiring support for FOS\UserBundle\Mailer\MailerInterface

• Fixed a deprecated warning reported by DebugClassLoader in the AdvancedUserInterface BC layer due to the change done in 2.2.3.

• Added missing deprecations on some group-related event classes
• Fixed an invalid report of UserInterface being deprecated in static analyzers
• Fixed the documented return type for \FOS\UserBundle\Event\GetResponseNullableUserEvent::getUser

• Fixed a deprecation warning about groups being triggered when loading all Doctrine metadata.

• Fixed a deprecation warning about groups being triggered when loading the User class of the bundle.

• Deprecated the Groups feature.
• Marked all controllers final.
• Marked internal classes as such.
• Added Mongolian translation.
• Added an email provider.
• Added a custom user checker.
• Added PHP 7.4 and PHP 8.0 support.
• Removed fieldName attribute in MongoDB mapping.
• Registration confirmation now redirects to login page if token is invalid.
• User model will not rely on AdvancedUserInterface anymore.
• Self-salting password encoders will not create a salt anymore.
• FlashListener constructor now accepts SessionInterface.
• Fixed several Symfony deprecation notices.
• Fixed several translations.
• Bumped the min PHP version to 7.1.3.
• Bumped the min Symfony version to 4.4.
• Added compatibility with Twig 3.
• Added compatibility with doctrine/persistence 2.

• Fixed compatibility of controllers with Symfony 2.8

• Fixed the check for the required session, to account for the fact it is not always required.

• Dropped Symfony < 2.8 support.
• Added Symfony 4 compatibility.
• Refactored controllers and commands to use DI. Projects extending these classes will need to adapt their code (but should rather use supported extension points when possible).
• Redirect to login when requesting resetting password with invalid token.
• Added autocomplete hints for password inputs.
• Fixed several incorrect Turkish translations.

• Fix empty password in ChangePasswordFormType.
• Fix empty password in ProfileFormType.
• Introduced aliases for autowiring user and group managers.
• Added Bengali translation.
• Added Galician translation.
• Updated Danish translation.
• Updated Japanese translation.

• Add SwiftMailer 6 compatibility.
• Inject firewall user_checker into LoginManager.
• Updated English translation.
• Updated Estonian translation.
• Updated Persian translation.
• Updated Turkish translation.
• Updated several docs.

• Removed default fos_user.from_email configuration values.
• Removed usage of internal Twig APIs when rendering emails.
• Add a timeout for the reset retry request.
• Add Esperanto translations.
• Fixed incorrect confirmation url.
• Commented outdated entries in several translation files.
• [BC break] Use UserManager::getRepository() instead of UserManager::$repository.
• [BC break] Use UserManager::getClass() instead of UserManager::$class.

• Use ceil in ResettingController for a better token lifetime approximation.
• Removed unused translation keys.
• Removed form deprecations.
• Use @-based Twig syntax for templates.
• Improved several language files.
• Improved documentation.
• Ability to disable the authentication listener.
• Removed DateUtil class.
• [BC break] Changed validation max length to match the database structure.

• Dropped Symfony < 2.7 support.
• Dropped PHP < 5.5 support.
• Exclude tests from autoloader.
• Allow to use POST for logout.
• Fix UserPassword constraint validation groups.
• Harmonized email detection in UserManager.
• Added unique index for confirmation_token field.
• Added Kyrgyz translation files.
• Added user manipulator events.
• Replaced checkPostAuth by checkPreAuth in AuthenticationListener.
• [BC break] Method ResettingController::getObfuscatedEmail has been removed.
• [BC break] Renamed templates to underscore case.
• [BC break] Removed UserManager::refreshUser.
• [BC break] Removed UserManager::loadUserByUsername.
• [BC break] Removed UserManager::supportsClass.
• [BC break] Removed unused properties expired and credentialsExpired including corresponding methods.
• [BC break] The signature of the Initializer constructor has changed.
• [BC break] The signature of the LoginManager constructor has changed.
• [BC break] The signature of the UserListener constructor has changed.
• [BC break] The signature of the UserManager constructor has changed.
• [BC break] The translation key resetting.request.invalid_username has been removed.
• [BC break] The propel dependency was dropped.
• [BC break] The salt field of the User class is now nullable.

• Fixed some yaml errors in translation files
• Fixed bad credentials translations
• Fixed canonicalizer with illegal chars
• Fixed deprecated routing configuration
• Fixed class name check in UserProvider::refreshUser()
• Updated several translation files
• Removed colons from translation files
• Updated several documentation examples
• Converted documentation to rst format

Reverted the removed of the expired and credentialsExpired properties as the BC break could lead to corrupted objects being created if server sessions are not cleared when upgrading the bundle.

DO NOT USE THIS RELEASE

One of the BC break in this PR could cause corrupted objects to be created when unserializing the session, and got reverted. Use alpha3 instead.

• [BC break] The deprecated entity classes have been removed.
• The minimum requirement for Symfony has been bumped to 2.3 (older versions are already EOLed).
• [BC break] UserInterface::isUser has been removed as it was used only by the old validation logic removed a long time ago.
• [BC break] The FOSUserBundle:Security:login.html.twig template now receives an AuthenticationException in the error variable rather than an error message.
• [BC break] The templating engine configuration has been removed, as well as the related code.
• [BC break] Changed the XML namespace to http://friendsofsymfony.github.io/schema/dic/user
• [BC break] Added UserInterface::getId.
• [BC break][Reverted in alpha3] Removed unused properties expired and credentialsExpired including corresponding methods. This may break code, makes use of this methods, extending classes, and/or existing installations because of missing mappings for required db fields.

• Updated many translations.
• Changed the way to pass the email to the page asking to check the email to avoid issues with non-blocking sessions.
• Changed the fos_user_security_check route to enforce POST.
• Removed the deprecated UserManager and GroupManager classes for the different Doctrine implementations.
• [BC break] Refactored the structure of controller to dispatch events instead of using form handlers.
• Removed all form handlers.
• [BC break] Changed Datetime properties of default User entity that were nullable to default to null when no value supplied.
• [BC break] Updated schema.xml for Propel BaseUser class to allow nullable and typehint accordingly.