Actions
Feature #100077
closed
Add PSR-14 event to conditionally disable request token validation
Start date:
2023-03-03
Due date:
% Done:
0%
Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:
Description
The request token validation introduced in #97305 required a valid request token in AbstractUserAuthentication. This is problematic for extensions implementing an external SSO (e.g. OpenID, OpenID Connect, ...), if the authentication process was initialized without submitting a request token.
A new PSR-14 event must be added, so extensions can conditionally disable the request token validation in AbstractUserAuthentication.
Updated by Torben Hansen about 1 year ago
- Status changed from New to Closed
Already possible using beforerequesttokenprocessedevent
Actions