Skip to content

Commit c3a0de5

Browse files
bug symfony#50819 [SecurityBundle] Do not translate Bearer header’s error_description (MatTheCat)
This PR was squashed before being merged into the 6.2 branch. Discussion ---------- [SecurityBundle] Do not translate `Bearer` header’s `error_description` | Q | A | ------------- | --- | Branch? | 6.2 | Bug fix? | yes | New feature? | no | Deprecations? | no | Tickets | Fix symfony#50811 | License | MIT | Doc PR | N/A From [RFC 6750](https://datatracker.ietf.org/doc/html/rfc6750#section-3): > the "error_description" attribute [provides] a human-readable explanation that is not meant to be displayed to end-users. Not translating it avoids non-ASCII characters in `Bearer`’s value, which in turn avoid messing with [RFC 8187](https://www.rfc-editor.org/rfc/rfc8187.html) (fun read; thanks `@derrabus`!). Not sure if and how this should be tested 🤔 Commits ------- cde0af3 [SecurityBundle] Do not translate `Bearer` header’s `error_description`
2 parents 3fe8e02 + cde0af3 commit c3a0de5

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

src/Symfony/Bundle/SecurityBundle/Resources/config/security_authenticator_access_token.php

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,6 @@
3333
null,
3434
null,
3535
])
36-
->call('setTranslator', [service('translator')->ignoreOnInvalid()])
3736

3837
->set('security.authenticator.access_token.chain_extractor', ChainAccessTokenExtractor::class)
3938
->abstract()

0 commit comments

Comments
 (0)