Fix broken session management for application api

This commit is contained in:
Dane Everitt 2021-11-03 21:33:21 -07:00
parent e8a8405899
commit 17c03e9a4d
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
2 changed files with 8 additions and 0 deletions

View file

@ -3,7 +3,13 @@ This file is a running track of new features and fixes to each version of the pa
This project follows [Semantic Versioning](http://semver.org) guidelines. This project follows [Semantic Versioning](http://semver.org) guidelines.
## v1.6.5
### Fixed
* Fixes broken application API endpoints due to changes introduced with session management in 1.6.4.
## v1.6.4 ## v1.6.4
_This release should not be used, please use `1.6.5`. It has been pulled from our releases._
### Fixed ### Fixed
* Fixes a session management bug that would cause a user who signs out of one browser to be unintentionally logged out of other browser sessions when using the client API. * Fixes a session management bug that would cause a user who signs out of one browser to be unintentionally logged out of other browser sessions when using the client API.

View file

@ -70,6 +70,8 @@ class Kernel extends HttpKernel
'api' => [ 'api' => [
HandleStatelessRequest::class, HandleStatelessRequest::class,
IsValidJson::class, IsValidJson::class,
StartSession::class,
AuthenticateSession::class,
ApiSubstituteBindings::class, ApiSubstituteBindings::class,
'api..key:' . ApiKey::TYPE_APPLICATION, 'api..key:' . ApiKey::TYPE_APPLICATION,
AuthenticateApplicationUser::class, AuthenticateApplicationUser::class,