Hi,

Inside ContextListener->refreshUser(), I encountered an uncaught exception 
because $provider->refreshUser($user) was returning null, so the call to 
$token->setUser($refreshedUser) would cause an uncaught 
InvalidArgumentException.

I modified the bit of code so that it returns a null token if I get null from 
the provider. This works for my case, at least, and I'm not sure whether it 
might affect anything else in the long run, so I'm posting it here just in 
case anyone has any insights.

$refreshedUser = $provider->refreshUser($user);

if ($refreshedUser !== null) {
     $token->setUser($refreshedUser);
} else {
     return null;
}

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to symfony-devs@googlegroups.com
To unsubscribe from this group, send email to
symfony-devs+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to