Hi, Inside ContextListener->refreshUser(), I encountered an uncaught exception because $provider->refreshUser($user) was returning null, so the call to $token->setUser($refreshedUser) would cause an uncaught InvalidArgumentException.
I modified the bit of code so that it returns a null token if I get null from the provider. This works for my case, at least, and I'm not sure whether it might affect anything else in the long run, so I'm posting it here just in case anyone has any insights. $refreshedUser = $provider->refreshUser($user); if ($refreshedUser !== null) { $token->setUser($refreshedUser); } else { return null; } -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony developers" group. To post to this group, send email to symfony-devs@googlegroups.com To unsubscribe from this group, send email to symfony-devs+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-devs?hl=en