[application/connect] simplify connection logic ``application.connect`` now either sets a full featured ``DBAPISession`` to the ``WebRequest`` object or raises ``AuthenticationError``. The creation and usage of a fake DBAPISession is now handled by ``main_handle_request`` when needed. This means that fake DBAPISession are no longer tracked by the session manager and that user are not given anyway to retrieve them for a later request. This fake DBAPISession is still passed to ``core_handle`` because multiple cubes like registration or forgotten password need this behavior. We would like to get ride of it in the future. This clarification of the connection API greatly simplifies ``DBAPISession`` retrieval//creation process opening the way to improvements in this area. Related to #2503918

     1

What's new in CubicWeb 4.0?

     2

============================

     3

     4

Deprecated Code Drops

     5

----------------------

     6

     7

* The ldapuser source has been dropped. ldapfeed is the only official source

     8

  remaining for ldap.

     9

    10

* session.hijack_user mechanism has been dropped.