v7.3.0

• Introduce CacheableVoterInterface to reduce amounts of calls, #228, thanks to @kevinpapst

v7.2.0

• Support for array values in the ip_whitelist option, #217, thanks to @danielburger1337
  • This allows the user to specify the IpUtils::PRIVATE_SUBNETS constant together with some public IPs

v7.1.0

• Add TwoFactorProviderDecider, adding the ability to influence which 2fa provider is picked when there are multiple ones available, #215, thanks to @danielburger1337

v7.0.0

New major release including support for Symfony 7.

Please check the instructions to upgrade from bundle version 6.x to 7.x.

v6.12.0

Declare conflict with symfony/security-core v7.

Background: When using 2fa-bundle v6 on Symfony 6.4, you might have symfony/security-core v7 pulled in as a dependency. The v7 version is missing the Symfony\Component\Security\Core\Security class, which is necessary for 2fa-bundle v6 to work.

v6.11.0

The window config option is deprecated and will be removed in bundle version 7. Please use the new option leeway instead.

See the configuration reference for details

---

Background: The options scheb_two_factor.google.window and scheb_two_factor.totp.window behave differently, depending on the version of Spomky-Labs/otphp used:

• With Spomky-Labs/otphp v10: How many codes before/after the current one would be accepted
• With Spomky-Labs/otphp v11: Acceptable time drift in seconds

To address this confusing ambiguous behavior (#201), the new config option leeway is introduced, which is only allowed in conjunction with Spomky-Labs/otphp v11.

v6.10.0

• Add support for PHP 8.3 🎁
• Use of deprecated HttpKernelInterface::MASTER_REQUEST was replaced with HttpKernelInterface::MAIN_REQUEST

v6.9.0

• Add Turkish translations, thanks to @umut-ramazan

v6.8.0

• Allow lcobucci/jwt v5 in #180, thanks to @maxhelias

v6.7.0

• Fix lcobucci/jwt ValidAt, #178, thanks to @maxhelias
• Minimum required version for lcobucci/jwt was bumped up to 4.1