Bug #1948

Fatal error when tokens are retrieved from session

Added by Karsten Dambekalns over 6 years ago. Updated almost 5 years ago.

Status:Resolved Start date:2008-11-04
Priority:Must have Due date:
Assigned To:Andreas Förthner % Done:

100%
Category:Security
Target version:TYPO3 Flow Base Distribution - 1.0 alpha 1
PHP Version: Complexity:
Has patch: Affected Flow version:

Description

As soon as a session is present FLOW3 is unable to start up because of
Fatal error: Call to a member function getPOSTArguments() on a non-object in .../F3_FLOW3_Security_Authentication_Token_UsernamePassword.php on line 145

This is caused by the token trying to use $this->environment after being fetched from a PHP session in ContextHolderSession. This must be fixed ASAP, e.g. by making sure the inject* methods are called after the context holding the tokens is woken up.

In a later stage this should be using session scope with the component manager (see #1947).

Related issues

related to TYPO3.Flow - Feature #1947: Implement session scope for object manager Resolved

Associated revisions

Revision 46a7a094
Added by Andreas Förthner over 6 years ago

This temporary fixes #1948 until we have a proper session scope. For now it only fixes the problem for UsernamePassword tokens (as this is the only token type we have at the moment)

History

#1 Updated by Andreas Förthner over 6 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

Applied in changeset r1428.

Also available in: Atom PDF