Clear user instance on rebind request (laravel#22649)

Because it could change the credentials
BenCavens · Jan 5, 2018 · 5ce64fc · 5ce64fc
1 parent 62400b2
commit 5ce64fc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Illuminate/Auth/RequestGuard.php b/src/Illuminate/Auth/RequestGuard.php
@@ -80,6 +80,8 @@ public function validate(array $credentials = [])
      */
     public function setRequest(Request $request)
     {
+        $this->user = null;
+
         $this->request = $request;
 
         return $this;