[Security] Fix AuthenticationTrustResolver::isAnonymous()

chalasr · chalasr · commit 7cac631050c9 · 2021-08-25T14:54:56.000+02:00
diff --git a/src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php b/src/Symfony/Component/Security/Core/Authentication/AuthenticationTrustResolver.php
@@ -12,6 +12,7 @@
 namespace Symfony\Component\Security\Core\Authentication;
 
 use Symfony\Component\Security\Core\Authentication\Token\AnonymousToken;
+use Symfony\Component\Security\Core\Authentication\Token\NullToken;
 use Symfony\Component\Security\Core\Authentication\Token\RememberMeToken;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 
@@ -38,7 +39,7 @@ public function isAnonymous(TokenInterface $token = null/*, $deprecation = true*
             trigger_deprecation('symfony/security-core', '5.4', 'The "%s()" method is deprecated, use "isAuthenticated()" or "isFullFledged()" if you want to check if the request is (fully) authenticated.', __METHOD__);
         }
 
-        return $token && !$this->isAuthenticated($token);
+        return $token instanceof AnonymousToken || $token instanceof NullToken || ($token && !$token->getUser());
     }
 
     /**

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,7 @@`
`12`	`12`	`namespace Symfony\Component\Security\Core\Authentication;`
`13`	`13`
`14`	`14`	`use Symfony\Component\Security\Core\Authentication\Token\AnonymousToken;`
	`15`	`+use Symfony\Component\Security\Core\Authentication\Token\NullToken;`
`15`	`16`	`use Symfony\Component\Security\Core\Authentication\Token\RememberMeToken;`
`16`	`17`	`use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;`
`17`	`18`
`@@ -38,7 +39,7 @@ public function isAnonymous(TokenInterface $token = null/, $deprecation = true`
`38`	`39`	`trigger_deprecation('symfony/security-core', '5.4', 'The "%s()" method is deprecated, use "isAuthenticated()" or "isFullFledged()" if you want to check if the request is (fully) authenticated.', __METHOD__);`
`39`	`40`	`}`
`40`	`41`
`41`		`- return $token && !$this->isAuthenticated($token);`
	`42`	`+ return $token instanceof AnonymousToken \|\| $token instanceof NullToken \|\| ($token && !$token->getUser());`
`42`	`43`	`}`
`43`	`44`
`44`	`45`	`/**`