5.2.13 (2019-12-13)

Overview of merged pull requests

TASK: Remove code dealing with removed class/interface

The FlowSpecificBackendInterface as well as Neos\Flow\Cache\Backend are gone with Flow 5.0, so this code is never executed.

The implements CacheFactoryInterface is redundant, thus removed.

  • Packages: Flow

BUGFIX: Do not renew session id for sessionless tokens being authenti…

After the refactoring of #1407 not all tokens are stored in the SecurityContext, but in the Session. But only those, which do not implement SessionlessTokenInterface (which had been stored in the session before, if a session had been started). As the tokens are not longer persisted, the provider has no chance, but to authenticate the token with every request (which sounds fine and expectable for me). But if a session is started, the authentication of a session less token leads to renewal of the session id. Now in every request - which leads to rough times for concurrent requests.

This change makes sure session ids only get renewed, if the token was not sessionless.

  • Packages: Flow