added API tokens, deprecate API passwords (#4637)

2024-04-05 23:51:16 +02:00
parent dd51c8dfba
commit afe0656502
60 changed files with 889 additions and 624 deletions
--- a/src/EventSubscriber/ProfileSubscriber.php
+++ b/src/EventSubscriber/ProfileSubscriber.php
@@ -31,6 +31,11 @@ final class ProfileSubscriber implements EventSubscriberInterface
    {
        $request = $event->getRequest();

+        // make sure that we do NOT access the session, if the request is stateless
+        if ($request->attributes->getBoolean('_stateless')) {
+            return;
+        }
+
        $profile = $this->profileManager->getProfileFromCookie($request);
        if ($this->profileManager->isValidProfile($profile)) {
            $this->profileManager->setProfile($request->getSession(), $profile);