Weave Code
Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message

Security Core Laravel Package

symfony/security-core

Symfony's core security library provides the infrastructure for authentication and authorization: user providers, tokens, voters, role hierarchies, and access decision management, decoupled from your application's actual authorization logic.

View on GitHub
Deep Wiki
Context7
v5.4.54

Changelog (https://github.com/symfony/security-core/compare/v5.4.48...v5.4.54)

  • bug #65733 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
  • bug #65685 Narrow the race that lets a login link exceed max_uses (@nicolas-grekas)

[SECURITY] Security release

v8.1.8

Changelog (https://github.com/symfony/security-core/compare/v8.1.6...v8.1.8)

  • bug #66422 Give each role its own node in the Mermaid dump (@nicolas-grekas)
  • minor #66205 Review Macedonian (mk) translations (@KalimeroMK)
  • bug #66199 Keep the real role names in the labels of the Mermaid dump (@javiereguiluz)
  • minor #66120 Document that user checkers run on every authentication (@nicolas-grekas)
v8.1.5

Changelog (https://github.com/symfony/security-core/compare/v8.1.2...v8.1.5)

  • bug #65528 Track session usage when a lazy firewall reads the token (@nicolas-grekas)
v7.4.17

Changelog (https://github.com/symfony/security-core/compare/v7.4.15...v7.4.17)

  • bug #65528 Track session usage when a lazy firewall reads the token (@nicolas-grekas)
v6.4.44

Changelog (https://github.com/symfony/security-core/compare/v6.4.43...v6.4.44)

  • bug #65528 Track session usage when a lazy firewall reads the token (@nicolas-grekas)
v8.1.2

Changelog (https://github.com/symfony/security-core/compare/v8.1.1...v8.1.2)

  • minor #64882 Finalize Urdu (ur) translations (@sadiqk2)
  • minor #64821 Review Bosnian (bs) translations (@pkranjcecx)
  • minor #64811 fix broken Armenian placeholders (@munzzyy)
  • minor #64737 Improve Croatian translations (@HypeMC)
v8.0.15

Changelog (https://github.com/symfony/security-core/compare/v8.0.14...v8.0.15)

  • minor #64882 Finalize Urdu (ur) translations (@sadiqk2)
  • minor #64821 Review Bosnian (bs) translations (@pkranjcecx)
  • minor #64811 fix broken Armenian placeholders (@munzzyy)
  • minor #64737 Improve Croatian translations (@HypeMC)
v7.4.15

Changelog (https://github.com/symfony/security-core/compare/v7.4.14...v7.4.15)

  • minor #64882 Finalize Urdu (ur) translations (@sadiqk2)
  • minor #64821 Review Bosnian (bs) translations (@pkranjcecx)
  • minor #64811 fix broken Armenian placeholders (@munzzyy)
  • minor #64737 Improve Croatian translations (@HypeMC)
v6.4.43

Changelog (https://github.com/symfony/security-core/compare/v6.4.42...v6.4.43)

  • minor #64882 Finalize Urdu (ur) translations (@sadiqk2)
  • minor #64821 Review Bosnian (bs) translations (@pkranjcecx)
  • minor #64811 fix broken Armenian placeholders (@munzzyy)
  • minor #64737 Improve Croatian translations (@HypeMC)
v8.1.1

Changelog (https://github.com/symfony/security-core/compare/v8.1.0...v8.1.1)

  • bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
  • bug #64558 Make RoleHierarchy::getReachableRoleNames() return a list again (@nicolas-grekas)
v8.0.14

Changelog (https://github.com/symfony/security-core/compare/v8.0.13...v8.0.14)

  • bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
v7.4.14

Changelog (https://github.com/symfony/security-core/compare/v7.4.13...v7.4.14)

  • bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
v6.4.42

Changelog (https://github.com/symfony/security-core/compare/v6.4.41...v6.4.42)

  • bug #64566 Harden __toString trampolines via __unserialize() (@nicolas-grekas)
v8.1.0-RC1

Changelog (https://github.com/symfony/security-core/compare/v8.1.0-BETA3...v8.1.0-RC1)

  • bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)
v8.0.13

Changelog (https://github.com/symfony/security-core/compare/v8.0.12...v8.0.13)

  • bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)
v7.4.13

Changelog (https://github.com/symfony/security-core/compare/v7.4.12...v7.4.13)

  • bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)
v6.4.41

Changelog (https://github.com/symfony/security-core/compare/v6.4.39...v6.4.41)

  • bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)
v8.1.0-BETA3

Changelog (https://github.com/symfony/security-core/compare/v8.1.0-BETA2...v8.1.0-BETA3)

  • bug #64213 Fix impersonation being deauthenticated on every request (@nicolas-grekas)
v8.0.12

Changelog (https://github.com/symfony/security-core/compare/v8.0.11...v8.0.12)

  • bug #64213 Fix impersonation being deauthenticated on every request (@nicolas-grekas)
v7.4.12

Changelog (https://github.com/symfony/security-core/compare/v7.4.11...v7.4.12)

  • bug #64213 Fix impersonation being deauthenticated on every request (@nicolas-grekas)
v8.1.0-BETA2

Changelog (https://github.com/symfony/security-core/compare/v8.1.0-BETA1...v8.1.0-BETA2)

  • bug #64195 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
v8.0.11

Changelog (https://github.com/symfony/security-core/compare/v8.0.3...v8.0.11)

  • bug #64195 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
v7.4.11

Changelog (https://github.com/symfony/security-core/compare/v7.4.3...v7.4.11)

  • bug #64195 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
v6.4.39

Changelog (https://github.com/symfony/security-core/compare/v6.4.31...v6.4.39)

  • bug #64195 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
v8.1.0-BETA1

Changelog (https://github.com/symfony/security-core/compare/v8.0.13...v8.1.0-BETA1)

  • bug #64343 Harden __unserialize against __toString trampolines (@nicolas-grekas)
  • bug #64213 Fix impersonation being deauthenticated on every request (@nicolas-grekas)
  • bug #64195 Remove the legacy nested unserialize() call from token and exception classes (@nicolas-grekas)
  • feature #63945 Make constraint validators reentrant instead of being stateful (@stof)
  • feature #64009 Improve phpdoc types (@stof)
  • feature #53998 Add retrieval of parent role names (@PierreCapel)
  • feature #63157 Add support for enums in SignatureHasher::computeSignatureHash() (@nicolas-grekas)
v8.0.8
v7.4.8
v6.4.36
v8.0.4
v7.4.4
v7.3.10
v8.0.3

Changelog (https://github.com/symfony/security-core/compare/v8.0.2...v8.0.3)

  • bug symfony/symfony#62796 [Security] do not use PHPUnit mock objects without configured expectations (@xabbuh)
v7.4.3

Changelog (https://github.com/symfony/security-core/compare/v7.4.2...v7.4.3)

  • bug symfony/symfony#62796 [Security] do not use PHPUnit mock objects without configured expectations (@xabbuh)
v7.3.9

Changelog (https://github.com/symfony/security-core/compare/v7.3.8...v7.3.9)

  • bug symfony/symfony#62796 [Security] do not use PHPUnit mock objects without configured expectations (@xabbuh)
v6.4.31

Changelog (https://github.com/symfony/security-core/compare/v6.4.30...v6.4.31)

  • bug symfony/symfony#62796 [Security] do not use PHPUnit mock objects without configured expectations (@xabbuh)
v7.4.0

Changelog (https://github.com/symfony/security-core/compare/v7.4.0-RC3...v7.4.0)

  • feature symfony/symfony#62469 [Security] Keep SymfonyCasts as backers of the Security components v7.4 🤗 (@nicolas-grekas)
v7.3.5
v6.4.27
v8.0.0-BETA1

Changelog (https://github.com/symfony/security-core/compare/v7.3.4...v8.0.0-BETA1)

  • feature symfony/symfony#60085 [Security] improve VoteObject adding extraData for give more possibilities to AccessDecicsionStrategy (@eltharin)
  • feature symfony/symfony#61760 [Security] remove the user FQCN from remember me cookies (@xabbuh)
  • feature symfony/symfony#61743 [Security] deprecate the FQCN properties of PersistentToken and RememberMeDetails (@xabbuh)
  • feature symfony/symfony#61654 [Security] Deprecate PersistentToken::getClass() and RememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
  • feature symfony/symfony#61034 [Security][SecurityBundle] Dump role hierarchy as mermaid chart (@damienfern)
  • feature symfony/symfony#61057 [Security] Improve performance of RoleHierarchy::buildRoleMap method (@simonjamain-gp, @simonjamain)
  • feature symfony/symfony#61063 [Validator] remove support for generic constraint option handling (@xabbuh)
  • feature symfony/symfony#61187 Declare new parameters on interfaces and methods explicitly (@nicolas-grekas)
  • feature symfony/symfony#61011 [Security] Remove deprecated RememberMeToken::getSecret() (@ktherage)
  • feature symfony/symfony#60801 [Validator] deprecate handling options in the base Constraint class (@xabbuh)
  • feature symfony/symfony#60742 [Ldap][Security] Remove deprecated eraseCredentials() from (User|Token)Interface (@chalasr)
  • feature symfony/symfony#60697 Enforce return types on all components (@nicolas-grekas)
  • feature symfony/symfony#60639 Bump Symfony 8 to PHP >= 8.4 (@nicolas-grekas)
v7.4.0-BETA1

Changelog (https://github.com/symfony/security-core/compare/v7.3.4...v7.4.0-BETA1)

  • feature symfony/symfony#60085 [Security] improve VoteObject adding extraData for give more possibilities to AccessDecicsionStrategy (@eltharin)
  • feature symfony/symfony#61743 [Security] deprecate the FQCN properties of PersistentToken and RememberMeDetails (@xabbuh)
  • feature symfony/symfony#61654 [Security] Deprecate PersistentToken::getClass() and RememberMeDetails::getUserFqcn() in order to remove the user FQCN from the remember-me cookie in 8.0 (@nicolas-grekas)
  • feature symfony/symfony#61034 [Security][SecurityBundle] Dump role hierarchy as mermaid chart (@damienfern)
  • feature symfony/symfony#61057 [Security] Improve performance of RoleHierarchy::buildRoleMap method (@simonjamain-gp, @simonjamain)
  • feature symfony/symfony#60801 [Validator] deprecate handling options in the base Constraint class (@xabbuh)
v7.3.4

Changelog (https://github.com/symfony/security-core/compare/v7.3.3...v7.3.4)

  • bug symfony/symfony#61830 [Security] Fix preload warning in AuthorizationChecker (@MatTheCat)
  • bug symfony/symfony#61595 [Security] Pass attributes to nested ChainUserProviders (@valtzu)
  • bug symfony/symfony#61548 [Security] Fix attribute-based chained user providers (@valtzu)
v6.4.26

Changelog (https://github.com/symfony/security-core/compare/v6.4.25...v6.4.26)

  • bug symfony/symfony#61595 [Security] Pass attributes to nested ChainUserProviders (@valtzu)
  • bug symfony/symfony#61548 [Security] Fix attribute-based chained user providers (@valtzu)
v7.3.3
v6.4.25
v7.3.2

Changelog (https://github.com/symfony/security-core/compare/v7.3.1...v7.3.2)

  • bug symfony/symfony#61194 [Security] Fix added $token argument to UserCheckerInterface::checkPostAuth() (@nicolas-grekas)
v7.2.9

Changelog (https://github.com/symfony/security-core/compare/v7.2.8...v7.2.9)

  • bug symfony/symfony#61194 [Security] Fix added $token argument to UserCheckerInterface::checkPostAuth() (@nicolas-grekas)
v6.4.24
v7.3.1

Changelog (https://github.com/symfony/security-core/compare/v7.3.0...v7.3.1)

  • bug symfony/symfony#60840 [Validator] Add missing HasNamedArguments to some constraints (@jkgroupe)
  • bug symfony/symfony#60688 [Security] Keep roles when serializing tokens (@nicolas-grekas)
v7.2.8
v6.4.23
v7.2.7
v6.4.22
v7.3.0-RC1

Changelog (https://github.com/symfony/security-core/compare/v7.3.0-BETA2...v7.3.0-RC1)

  • bug symfony/symfony#60401 Passing more than one Security attribute is not supported (@santysisi)
v7.3.0-BETA1

Changelog (https://github.com/symfony/security-core/compare/v7.2.6...v7.3.0-BETA1)

  • feature symfony/symfony#50027 [Security] OAuth2 Introspection Endpoint (RFC7662) (@Spomky)
  • feature symfony/symfony#59805 [Security] Improve DX of recent additions (@nicolas-grekas)
  • feature symfony/symfony#59150 [Security] Allow using a callable with #[IsGranted] (@alexandre-daubois)
  • feature symfony/symfony#59771 [Security] Add ability for voters to explain their vote (@nicolas-grekas)
  • feature symfony/symfony#59562 [Security] Support hashing the hashed password using crc32c when putting the user in the session (@nicolas-grekas)
  • feature symfony/symfony#59682 [Security] Deprecate UserInterface & TokenInterface's eraseCredentials() (@chalasr, @nicolas-grekas)
  • feature symfony/symfony#48142 [Security][SecurityBundle] User authorization checker (@natewiebe13)
v7.2.6
v6.4.21
Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
jinas/dhivatar
store-doc/laravel-storage-driver
plus-it/laravel-translation-manager
diephp/perhaps
diephp/telegraph
osmaviation/spreadsheet
microsoft/fluentui-system-icons
mmccook/php-json-canonicalization-scheme
middlewares/firewall
qubiqx/montapacking
nyoncode/laravel-package-console
pnscripts/filament-broadquill-lite
pnscripts/laravel-sentfold-lite
vleap/mx-sdk-laravel-internal
twidpay/utils
htetmyathlaing/scout-elasticsearch-driver
artisan-toolbox/front-awesome
ls/client-assistant
users-au/laravel-client
cgv/localized-resource