[Security] fix compat with older session payloads

nicolas-grekas · nicolas-grekas · commit 26dd796d7f48 · 2021-12-29T10:11:47.000+01:00
diff --git a/Authentication/Token/AbstractToken.php b/Authentication/Token/AbstractToken.php
@@ -12,6 +12,7 @@
 namespace Symfony\Component\Security\Core\Authentication\Token;
 
 use Symfony\Component\Security\Core\User\UserInterface;
+use Symfony\Component\Security\Core\User\InMemoryUser;
 
 /**
  * Base class for Token instances.
@@ -114,7 +115,8 @@ public function __serialize(): array
      */
     public function __unserialize(array $data): void
     {
-        [$this->user, , , $this->attributes, $this->roleNames] = $data;
+        [$user, , , $this->attributes, $this->roleNames] = $data;
+        $this->user = \is_string($user) ? new InMemoryUser($user, '', $this->roleNames) : $user;
     }
 
     /**

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,7 @@`
`12`	`12`	`namespace Symfony\Component\Security\Core\Authentication\Token;`
`13`	`13`
`14`	`14`	`use Symfony\Component\Security\Core\User\UserInterface;`
	`15`	`+use Symfony\Component\Security\Core\User\InMemoryUser;`
`15`	`16`
`16`	`17`	`/**`
`17`	`18`	`* Base class for Token instances.`
`@@ -114,7 +115,8 @@ public function __serialize(): array`
`114`	`115`	`*/`
`115`	`116`	`public function __unserialize(array $data): void`
`116`	`117`	`{`
`117`		`- [$this->user, , , $this->attributes, $this->roleNames] = $data;`
	`118`	`+ [$user, , , $this->attributes, $this->roleNames] = $data;`
	`119`	`+ $this->user = \is_string($user) ? new InMemoryUser($user, '', $this->roleNames) : $user;`
`118`	`120`	`}`
`119`	`121`
`120`	`122`	`/**`