Merge branch '5.0' into 5.1

* 5.0:
  Update expressions.rst
  Update custom_authentication_provider.rst
  Update access_denied_handler.rst
  Update access_control.rst

Author: javiereguiluz

security/access_control.rst

@@ -329,7 +329,7 @@ key:
                     // the 'role' and 'allow-if' options work like an OR expression, so
                     // access is granted if the expression is TRUE or the user has ROLE_ADMIN
                     'roles' => 'ROLE_ADMIN',
-                    'allow_if' => '"127.0.0.1" == request.getClientIp() or request.headers.has('X-Secure-Access')',
+                    'allow_if' => '"127.0.0.1" == request.getClientIp() or request.headers.has("X-Secure-Access")',
                 ],
             ],
         ]);

security/access_denied_handler.rst

@@ -51,7 +51,7 @@ configure it under your firewall:
         <!-- config/packages/security.xml -->
         <config>
             <firewall name="main">
-                <access_denied_handler>App\Security\AccessDeniedHandler</access_denied_handler>
+                <access-denied-handler>App\Security\AccessDeniedHandler</access-denied-handler>
             </firewall>
         </config>
 

security/custom_authentication_provider.rst

@@ -307,7 +307,7 @@ create a class which implements
 
     class WsseFactory implements SecurityFactoryInterface
     {
-        public function create(ContainerBuilder $container, $id, $config, $userProvider, $defaultEntryPoint)
+        public function create(ContainerBuilder $container, string $id, array $config, string $userProvider, ?string $defaultEntryPoint)
         {
             $providerId = 'security.authentication.provider.wsse.'.$id;
             $container
@@ -563,7 +563,7 @@ in order to put it to use::
 
     class WsseFactory implements SecurityFactoryInterface
     {
-        public function create(ContainerBuilder $container, $id, $config, $userProvider, $defaultEntryPoint)
+        public function create(ContainerBuilder $container, string $id, array $config, string $userProvider, ?string $defaultEntryPoint)
         {
             $providerId = 'security.authentication.provider.wsse.'.$id;
             $container

security/expressions.rst

@@ -18,7 +18,7 @@ accepts an :class:`Symfony\\Component\\ExpressionLanguage\\Expression` object::
     public function index()
     {
         $this->denyAccessUnlessGranted(new Expression(
-            '"ROLE_ADMIN" in roles or (not is_anonymous() and user.isSuperAdmin())'
+            '"ROLE_ADMIN" in role_names or (not is_anonymous() and user.isSuperAdmin())'
         ));
 
         // ...