Annotate classes with @final/@internal

src/backup-code/Security/Http/EventListener/CheckBackupCodeListener.php

@@ -8,6 +8,9 @@
 use Scheb\TwoFactorBundle\Security\TwoFactor\Provider\PreparationRecorderInterface;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
 
+/**
+ * @final
+ */
 class CheckBackupCodeListener extends AbstractCheckCodeListener
 {
     // Must be called before CheckTwoFactorCodeListener, because CheckTwoFactorCodeListener will throw an exception

src/backup-code/Security/TwoFactor/Backup/BackupCodeManager.php

@@ -7,6 +7,9 @@
 use Scheb\TwoFactorBundle\Model\BackupCodeInterface;
 use Scheb\TwoFactorBundle\Model\PersisterInterface;
 
+/**
+ * @final
+ */
 class BackupCodeManager implements BackupCodeManagerInterface
 {
     /**

src/backup-code/Security/TwoFactor/Backup/NullBackupCodeManager.php

@@ -4,6 +4,9 @@
 
 namespace Scheb\TwoFactorBundle\Security\TwoFactor\Backup;
 
+/**
+ * @final
+ */
 class NullBackupCodeManager implements BackupCodeManagerInterface
 {
     public function isBackupCode($user, string $code): bool

src/bundle/DependencyInjection/Compiler/AccessListenerCompilerPass.php

@@ -15,6 +15,8 @@
  *
  * Compatibility for Symfony <= 5.1, from Symfony 5.2 on the bundle uses FirewallListenerFactoryInterface
  * to inject its TwoFactorAccessListener.
+ *
+ * @final
  */
 class AccessListenerCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Compiler/AuthenticationProviderDecoratorCompilerPass.php

@@ -13,6 +13,8 @@
 
 /**
  * Get all registered authentication providers and decorate them with AuthenticationProviderDecorator.
+ *
+ * @final
  */
 class AuthenticationProviderDecoratorCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Compiler/MailerCompilerPass.php

@@ -10,6 +10,8 @@
 
 /**
  * Determine the default mailer to use.
+ *
+ * @final
  */
 class MailerCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Compiler/RememberMeServicesDecoratorCompilerPass.php

@@ -13,6 +13,8 @@
 /**
  * Decorates all remember-me services instances so that the remember-me cookie doesn't leak when two-factor
  * authentication is required.
+ *
+ * @final
  */
 class RememberMeServicesDecoratorCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Compiler/TwoFactorFirewallConfigCompilerPass.php

@@ -11,6 +11,8 @@
 
 /**
  * Collect registered two-factor firewall configs and add them to the context.
+ *
+ * @final
  */
 class TwoFactorFirewallConfigCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Compiler/TwoFactorProviderCompilerPass.php

@@ -12,6 +12,8 @@
 
 /**
  * Collect registered two-factor providers and register them.
+ *
+ * @final
  */
 class TwoFactorProviderCompilerPass implements CompilerPassInterface
 {

src/bundle/DependencyInjection/Configuration.php

@@ -16,6 +16,9 @@
 use Symfony\Component\Security\Guard\Token\PostAuthenticationGuardToken;
 use Symfony\Component\Security\Http\Authenticator\Token\PostAuthenticationToken;
 
+/**
+ * @final
+ */
 class Configuration implements ConfigurationInterface
 {
     public function getConfigTreeBuilder(): TreeBuilder

src/bundle/DependencyInjection/Factory/Security/AuthenticatorTwoFactorFactory.php

@@ -6,7 +6,9 @@
 
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface;
 
-// Compatibility with authenticators in Symfony >= 5.1
+/**
+ * @internal Compatibility with authenticators in Symfony >= 5.1
+ */
 class AuthenticatorTwoFactorFactory extends TwoFactorFactory implements AuthenticatorFactoryInterface
 {
 }

src/bundle/DependencyInjection/Factory/Security/FirewallListenerFactoryInterface.php

@@ -7,12 +7,16 @@
 use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\FirewallListenerFactoryInterface as BaseFirewallListenerFactoryInterface;
 
 if (interface_exists(BaseFirewallListenerFactoryInterface::class)) {
-    // Compatibility for Symfony >= 5.2
+    /**
+     * @internal Compatibility for Symfony >= 5.2
+     */
     interface FirewallListenerFactoryInterface extends BaseFirewallListenerFactoryInterface
     {
     }
 } else {
-    // Compatibility for Symfony <= 5.1
+    /**
+     * @internal Compatibility for Symfony <= 5.1
+     */
     interface FirewallListenerFactoryInterface
     {
     }

src/bundle/DependencyInjection/Factory/Security/TwoFactorFactory.php

@@ -12,6 +12,9 @@
 use Symfony\Component\DependencyInjection\Reference;
 use Symfony\Component\Security\Http\Event\AuthenticationTokenCreatedEvent;
 
+/**
+ * @internal Technically this class is final, but the compatibility layer needs to extend it
+ */
 class TwoFactorFactory implements SecurityFactoryInterface, FirewallListenerFactoryInterface
 {
     public const AUTHENTICATION_PROVIDER_KEY = 'two_factor';

src/bundle/DependencyInjection/Factory/Security/TwoFactorServicesFactory.php

@@ -8,6 +8,11 @@
 use Symfony\Component\DependencyInjection\ContainerBuilder;
 use Symfony\Component\DependencyInjection\Reference;
 
+/**
+ * @final
+ *
+ * @internal Helper class for TwoFactorFactory only
+ */
 class TwoFactorServicesFactory
 {
     public function createSuccessHandler(ContainerBuilder $container, string $firewallName, array $config, string $twoFactorFirewallConfigId): string

src/bundle/DependencyInjection/SchebTwoFactorExtension.php

@@ -11,6 +11,9 @@
 use Symfony\Component\DependencyInjection\Reference;
 use Symfony\Component\HttpKernel\DependencyInjection\Extension;
 
+/**
+ * @final
+ */
 class SchebTwoFactorExtension extends Extension
 {
     public function load(array $configs, ContainerBuilder $container): void

src/bundle/Model/Persister/DoctrinePersister.php

@@ -8,6 +8,9 @@
 use Doctrine\Persistence\ObjectManager;
 use Scheb\TwoFactorBundle\Model\PersisterInterface;
 
+/**
+ * @final
+ */
 class DoctrinePersister implements PersisterInterface
 {
     /**

src/bundle/Model/Persister/DoctrinePersisterFactory.php

@@ -8,6 +8,11 @@
 use Doctrine\Persistence\ManagerRegistry;
 use Scheb\TwoFactorBundle\Model\PersisterInterface;
 
+/**
+ * @final
+ *
+ * @internal For the DIC to construct a DoctrinePersister instance
+ */
 class DoctrinePersisterFactory
 {
     /**

src/bundle/SchebTwoFactorBundle.php

@@ -19,6 +19,9 @@
 use Symfony\Component\DependencyInjection\ContainerBuilder;
 use Symfony\Component\HttpKernel\Bundle\Bundle;
 
+/**
+ * @final
+ */
 class SchebTwoFactorBundle extends Bundle
 {
     public function build(ContainerBuilder $container): void

src/bundle/Security/Authentication/AuthenticationTrustResolver.php

@@ -8,6 +8,9 @@
 use Symfony\Component\Security\Core\Authentication\AuthenticationTrustResolverInterface;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 
+/**
+ * @final
+ */
 class AuthenticationTrustResolver implements AuthenticationTrustResolverInterface
 {
     /**

src/bundle/Security/Authentication/Exception/InvalidTwoFactorCodeException.php

@@ -6,6 +6,9 @@
 
 use Symfony\Component\Security\Core\Exception\BadCredentialsException;
 
+/**
+ * @final
+ */
 class InvalidTwoFactorCodeException extends BadCredentialsException
 {
     public const MESSAGE = 'Invalid two-factor authentication code.';

src/bundle/Security/Authentication/Exception/TwoFactorProviderNotFoundException.php

@@ -6,6 +6,9 @@
 
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 
+/**
+ * @final
+ */
 class TwoFactorProviderNotFoundException extends AuthenticationException
 {
     public const MESSAGE_KEY = 'Two-factor provider not found.';

src/bundle/Security/Authentication/Provider/AuthenticationProviderDecorator.php

@@ -16,6 +16,9 @@
 use Symfony\Component\Security\Core\Authentication\Token\AnonymousToken;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 
+/**
+ * @final
+ */
 class AuthenticationProviderDecorator implements AuthenticationProviderInterface
 {
     /**

src/bundle/Security/Authentication/Provider/TwoFactorAuthenticationProvider.php

@@ -15,6 +15,9 @@
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 
+/**
+ * @final
+ */
 class TwoFactorAuthenticationProvider implements AuthenticationProviderInterface
 {
     /**

src/bundle/Security/Authentication/RememberMe/RememberMeServicesDecorator.php

@@ -11,6 +11,9 @@
 use Symfony\Component\Security\Http\Logout\LogoutHandlerInterface;
 use Symfony\Component\Security\Http\RememberMe\RememberMeServicesInterface;
 
+/**
+ * @final
+ */
 class RememberMeServicesDecorator implements RememberMeServicesInterface, LogoutHandlerInterface
 {
     /**

src/bundle/Security/Authentication/Token/TwoFactorTokenFactory.php

@@ -6,6 +6,9 @@
 
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 
+/**
+ * @final
+ */
 class TwoFactorTokenFactory implements TwoFactorTokenFactoryInterface
 {
     public function create(TokenInterface $authenticatedToken, string $providerKey, array $twoFactorProviders): TwoFactorTokenInterface

src/bundle/Security/Authorization/TwoFactorAccessDecider.php

@@ -13,6 +13,9 @@
 use Symfony\Component\Security\Http\HttpUtils;
 use Symfony\Component\Security\Http\Logout\LogoutUrlGenerator;
 
+/**
+ * @final
+ */
 class TwoFactorAccessDecider
 {
     /**

src/bundle/Security/Authorization/Voter/TwoFactorInProgressVoter.php

@@ -9,6 +9,9 @@
 use Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter;
 use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
 
+/**
+ * @final
+ */
 class TwoFactorInProgressVoter implements VoterInterface
 {
     public const IS_AUTHENTICATED_2FA_IN_PROGRESS = 'IS_AUTHENTICATED_2FA_IN_PROGRESS';

src/bundle/Security/Http/Authenticator/Passport/Badge/RememberMeBadge.php

@@ -6,6 +6,9 @@
 
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\BadgeInterface;
 
+/**
+ * @final
+ */
 class RememberMeBadge implements BadgeInterface
 {
     public function isResolved(): bool

src/bundle/Security/Http/Authenticator/Passport/Credentials/TwoFactorCodeCredentials.php

@@ -6,6 +6,9 @@
 
 use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\CredentialsInterface;
 
+/**
+ * @final
+ */
 class TwoFactorCodeCredentials implements CredentialsInterface
 {
     /**

src/bundle/Security/Http/Authenticator/Passport/TwoFactorPassport.php

@@ -9,6 +9,9 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\PassportInterface;
 use Symfony\Component\Security\Http\Authenticator\Passport\PassportTrait;
 
+/**
+ * @final
+ */
 class TwoFactorPassport implements PassportInterface
 {
     use PassportTrait;

src/bundle/Security/Http/Authenticator/TwoFactorAuthenticator.php

@@ -29,6 +29,9 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\PassportInterface;
 use Symfony\Contracts\EventDispatcher\EventDispatcherInterface;
 
+/**
+ * @final
+ */
 class TwoFactorAuthenticator implements AuthenticatorInterface, InteractiveAuthenticatorInterface
 {
     public const FLAG_2FA_COMPLETE = '2fa_complete';

src/bundle/Security/Http/EventListener/AbstractCheckCodeListener.php

@@ -11,6 +11,9 @@
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
 
+/**
+ * @internal
+ */
 abstract class AbstractCheckCodeListener implements EventSubscriberInterface
 {
     /**

src/bundle/Security/Http/EventListener/CheckTwoFactorCodeListener.php

@@ -10,6 +10,9 @@
 use Scheb\TwoFactorBundle\Security\TwoFactor\Provider\TwoFactorProviderRegistry;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
 
+/**
+ * @final
+ */
 class CheckTwoFactorCodeListener extends AbstractCheckCodeListener
 {
     public const LISTENER_PRIORITY = 0;

src/bundle/Security/Http/EventListener/RememberMeListener.php

@@ -11,6 +11,9 @@
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
 
+/**
+ * @final
+ */
 class RememberMeListener implements EventSubscriberInterface
 {
     public function onSuccessfulLogin(LoginSuccessEvent $event): void

src/bundle/Security/Http/Firewall/ExceptionListener.php

@@ -15,6 +15,9 @@
 use Symfony\Component\Security\Core\Exception\AccessDeniedException;
 use Symfony\Contracts\EventDispatcher\EventDispatcherInterface;
 
+/**
+ * @final
+ */
 class ExceptionListener implements EventSubscriberInterface
 {
     // Just before the firewall's Symfony\Component\Security\Http\Firewall\ExceptionListener

src/bundle/Security/Http/Firewall/FirewallListenerInterface.php

@@ -7,12 +7,16 @@
 use Symfony\Component\Security\Http\Firewall\FirewallListenerInterface as BaseFirewallListenerInterface;
 
 if (interface_exists(BaseFirewallListenerInterface::class)) {
-    // Compatibility for Symfony >= 5.2
+    /**
+     * @internal Compatibility for Symfony >= 5.2
+     */
     interface FirewallListenerInterface extends BaseFirewallListenerInterface
     {
     }
 } else {
-    // Compatibility for Symfony <= 5.1
+    /**
+     * @internal Compatibility for Symfony <= 5.1
+     */
     interface FirewallListenerInterface
     {
     }

src/bundle/Security/Http/Firewall/TwoFactorAccessListener.php

@@ -18,6 +18,8 @@
 
 /**
  * Handles access control in the "2fa in progress" phase.
+ *
+ * @final
  */
 class TwoFactorAccessListener extends AbstractListener implements FirewallListenerInterface
 {

src/bundle/Security/Http/Firewall/TwoFactorListener.php

@@ -29,6 +29,9 @@
 use Symfony\Component\Security\Http\Authentication\AuthenticationSuccessHandlerInterface;
 use Symfony\Component\Security\Http\Firewall\AbstractListener;
 
+/**
+ * @final
+ */
 class TwoFactorListener extends AbstractListener
 {
     /**