[Security] PlainTextPasswordEncoder::isPasswordValid() throws an exception when the user has no password set (password is null) #35040
Description
Symfony version(s) affected: 4.4
Description
Actually PlainTextPasswordEnocder::isPasswordValid() throws an exception when the user has no password set (password is null)
How to reproduce
When UserInterface::password is null and the encoder is PlainTextPasswordEncoder an exception is thrown
Possible Solution
I think PlainTextPasswordEnocder::isPasswordValid() should return false when the user's password is null.