Add more #[\SensitiveParameter]

Author: fancyweb

AccessToken/AccessTokenHandlerInterface.php

@@ -24,5 +24,5 @@ interface AccessTokenHandlerInterface
     /**
      * @throws AuthenticationException
      */
-    public function getUserIdentifierFrom(string $accessToken): string;
+    public function getUserIdentifierFrom(#[\SensitiveParameter] string $accessToken): string;
 }

Authenticator/Passport/Badge/CsrfTokenBadge.php

@@ -33,7 +33,7 @@ class CsrfTokenBadge implements BadgeInterface
      *                                 Using a different string for each authenticator improves its security.
      * @param string|null $csrfToken   The CSRF token presented in the request, if any
      */
-    public function __construct(string $csrfTokenId, ?string $csrfToken)
+    public function __construct(string $csrfTokenId, #[\SensitiveParameter] ?string $csrfToken)
     {
         $this->csrfTokenId = $csrfTokenId;
         $this->csrfToken = $csrfToken;

Authenticator/Passport/Badge/PasswordUpgradeBadge.php

@@ -32,7 +32,7 @@ class PasswordUpgradeBadge implements BadgeInterface
      * @param string                         $plaintextPassword The presented password, used in the rehash
      * @param PasswordUpgraderInterface|null $passwordUpgrader  The password upgrader, defaults to the UserProvider if null
      */
-    public function __construct(string $plaintextPassword, PasswordUpgraderInterface $passwordUpgrader = null)
+    public function __construct(#[\SensitiveParameter] string $plaintextPassword, PasswordUpgraderInterface $passwordUpgrader = null)
     {
         $this->plaintextPassword = $plaintextPassword;
         $this->passwordUpgrader = $passwordUpgrader;