You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
RFC 2253 support is added in #31406 but it doesn't work if any OU name includes dot character (".") - regex in method \Symfony\Component\Security\Http\Firewall\X509AuthenticationListener::getPreAuthenticatedData() fails to select e-mail address.
How to reproduce
Test with the following DN: emailAddress=john.doe@example.com,CN=John Doe,OU=Foo,OU=Name.With.Dot,DC=Bar
Possible Solution
Change regex to cover described use case.
Consider this one: #(?:^|,|/)emailAddress=([^,/]+)#
Also, probably it is wise to add before mentioned example as additional test case in \Symfony\Component\Security\Http\Tests\Firewall\X509AuthenticationListenerTest::dataProviderGetPreAuthenticatedDataNoUser()