symfony/symfony-docs — pull request #1338 by tyler-sommer (2012-05-02 20:19:56+00:00)
Title: Custom Authentication Provider update

In the WsseUserToken example, the token is never set to authenticated. With the current setup, if an action required roles, authentication would be called twice and fail the second time, because the nonce is used at that point.