CakeDC/users 16.0.4

on GitHub

What's Changed

• Fix timing-safe comparison for social account token validation using hash_equals() (#1179)
• Reject empty/partial tokens explicitly in SocialAccountBehavior::validateAccount() (#1179)
• Fix UsersFixture missing tableAlias causing incorrect Table class resolution for additional_data json type (#1179)
• Fix schema.php discrepancies against migrations: users.active default, users.secret length, users.secret_verified default, social_accounts.avatar type, social_accounts.link type and nullability (#1179)