Fix: SSO identity lookup drops the fieldname filter (where() overrides where())

[blankse]

Bug

SsoIdentityManager::findUserBySsoIdentity() builds the lookup with two consecutive ->where() calls:

$qb->select('src_id')
   ->from('object_relations_' . $userClass::classId())
   ->where('fieldname = :ssoIdentitiesName')
   ->where('dest_id = :ssoIdentitiesId');

Doctrine DBAL's QueryBuilder::where() replaces any previously specified restriction, so the fieldname = :ssoIdentitiesName condition is dropped and only dest_id is filtered (the bound ssoIdentitiesName parameter is never used).

If the sso-identity object id happens to be referenced by another relation field of the user class, the query returns more than one row, count($result) === 1 is false, and the method returns null — the owning user is not resolved, breaking SSO login and the token-cleanup user lookup.

Fix

Use ->andWhere() for the second condition so both fieldname and dest_id are applied.

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[blankse]

I have read the CLA Document and I hereby sign the CLA

[blankse]

@solverat Are bug fixes still welcome here, or is the repository dead? If it is dead, I think it should be set to read-only.