v6.4.0-BETA1

Changelog (v6.3.6...v6.4.0-BETA1)

• feature symfony/symfony#51804 [Security] Make impersonation_path() argument mandatory and add impersonation_url() (@alexandre-daubois)
• feature symfony/symfony#50030 Add new twig bridge function to generate impersonation path (@PhilETaylor)
• feature symfony/symfony#51585 [Security] Add badge resolution to profiler (@Jean-Beru)
• feature symfony/symfony#51434 [Security] [Throttling] Hide username and client ip in logs (@Spomky)
• feature symfony/symfony#51250 Remove remaining experimental classes (@fabpot)
• feature symfony/symfony#50290 [Security] Make PersistentToken immutable and tell TokenProviderInterface::updateToken() implementations should accept DateTimeInterface (@nicolas-grekas)
• feature symfony/symfony#50842 Add missing return types to magic methods (@wouterj)

v6.3.6

Changelog (v6.3.5...v6.3.6)

• bug symfony/symfony#51858 [Security] Fix resetting traceable listeners (@chalasr)

v6.3.5

Changelog (v6.3.4...v6.3.5)

• no significant changes

v6.3.4

Changelog (v6.3.3...v6.3.4)

• bug symfony/symfony#51350 [Security] Prevent creating session in stateless firewalls (@Seb33300)
• bug symfony/symfony#51104 [Security] Fix loading user from UserBadge (@guillaumesmo)
• bug symfony/symfony#51445 [Security] FormLoginAuthenticator: fail for non-string password (@dmaicher)

v5.4.28

Changelog (v5.4.27...v5.4.28)

• bug symfony/symfony#51445 [Security] FormLoginAuthenticator: fail for non-string password (@dmaicher)

v6.3.2

Changelog (v6.3.1...v6.3.2)

• bug symfony/symfony#50552 [Security] Allow custom scheme to be used as redirection URIs (@Spomky)
• bug symfony/symfony#50582 [Security/Http] Fix false-string handling in RememberMeAuthenticator (@ossinkine)

v6.2.13

Changelog (v6.2.12...v6.2.13)

• bug symfony/symfony#50552 [Security] Allow custom scheme to be used as redirection URIs (@Spomky)
• bug symfony/symfony#50582 [Security/Http] Fix false-string handling in RememberMeAuthenticator (@ossinkine)

v5.4.26

Changelog (v5.4.25...v5.4.26)

• bug symfony/symfony#50552 [Security] Allow custom scheme to be used as redirection URIs (@Spomky)
• bug symfony/symfony#50582 [Security/Http] Fix false-string handling in RememberMeAuthenticator (@ossinkine)

v6.3.1

Changelog (v6.3.0...v6.3.1)

• no significant changes

v6.3.0

Changelog (v6.3.0-RC2...v6.3.0)

• bug symfony/symfony#50432 [Security] Validate aud and iss claims on OidcTokenHandler (@vincentchalamon)
• bug symfony/symfony#50477 [Security] Add clock dependency to OidcTokenHandler (@nicolas-grekas)