- Add
SameOriginCsrfTokenManager
- Remove the
SessionInterface $session
constructor argument ofSessionTokenStorage
, inject a\Symfony\Component\HttpFoundation\RequestStack $requestStack
instead - Using
SessionTokenStorage
outside a request context throws aSessionNotFoundException
The CHANGELOG for version 5.3 and earlier can be found at https://github.com/symfony/symfony/blob/5.3/src/Symfony/Component/Security/CHANGELOG.md