FriendsOfSymfony / FOSHttpCacheBundle

            $response->setClientTtl($this->options['ttl']);

            $response->setVary($this->options['user_identifier_headers']);

            $response->setPublic();

            if ($this->hasSessionListener && version_compare('4.1', Kernel::VERSION, '<=')) {

                // header to avoid Symfony SessionListener overwriting the response to private

                $response->headers->set(AbstractSessionListener::NO_AUTO_CACHE_CONTROL_HEADER, 1);

            }

        } else {

            $response->setClientTtl(0);

            $response->headers->addCacheControlDirective('no-cache');

            }

            // For Symfony 4.1+ if user hash header was in vary or just added here by "add_vary_on_hash"

            if ($this->hasSessionListener && \version_compare('4.1', Kernel::VERSION, '<=') && in_array($this->options['user_hash_header'], $vary)) {

                // header to avoid Symfony SessionListener overwriting the response to private

                $response->headers->set(AbstractSessionListener::NO_AUTO_CACHE_CONTROL_HEADER, 1);

            }

        } elseif ($this->options['add_vary_on_hash']) {

            /*

             * Additional precaution: If for some reason we get requests without a user hash, vary