ExternalSessionGuard
final class ExternalSessionGuard (View source)
Re-checks the account behind a session an identity provider established. SQL and LDAP sessions re-verify the account on every request; OIDC and SAML ones would not.
Methods
bool
accountIsActive()
False when the session's account, or the one awaiting MFA, was disabled or deleted.
Details
__construct(AuthUserLookupInterface $userLookup, SessionInterface $session)
No description
bool
accountIsActive()
False when the session's account, or the one awaiting MFA, was disabled or deleted.
A session without a user id holds no account and is left to the login flow.