State Handler with Custom Session Store

[datasage]

Currently the state handler will initialize a new session store when first created. Even if a custom session store is provided.

If a custom session store is used, it should be either able to be passed into the SessionStateHandler class or automatically used when instantiating the class.

SessionStateHandler could instead allow anything that implements StoreInterface, instead of just SessionStore.

[jspetrak]

@datasage How is that possible? Looking into the constructor code:

if (isset($config['state_handler'])) {
    if ($config['state_handler'] === false) {
        $this->stateHandler = new DummyStateHandler();
    } else {
        $this->stateHandler = $config['state_handler'];
    }
} else {
    $this->stateHandler = new SessionStateHandler(new SessionStore());
}

when state_handler parameter is passed to Auth0, that should take it as is.

[datasage]

Currently the type hint on the session state handler class references session store instead of the interface. So I have to duplicate it to use it.

[joshcanhelp]

@datasage - Good find, thank you! If you can put through a PR (dev as the base), that would be great. Otherwise, I'll handle it before the next patch release coming up.

[joshcanhelp]

Adding in 5.1.1, PR coming now

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.