Symfony2 - Authentication lost after redirection

Question

I've been experiencing an issue with my SF2 application today. I want the user to be automatically authenticated after submiting a valid subscription form.

So basically in my controller here's what I do:

if ($form->isValid()) {
    $customer = $form->getData();

    try {
        $customer = $this->get('my.service.manager.customer')->customerSubscribe($customer);
    } catch (APIClientException $e) {
        $error = $e->getErrors();
        ...
    }

    if ($customer && !isset($error)) {
        // connect customer
        $token = new UsernamePasswordToken($customer, null, 'api_auth', array('ROLE_USER'));
        $this->get('security.context')->setToken($token);

        ...
    }

    return new RedirectResponse($this->generateUrl('MyBundle_index'));
}

The two lines below the 'connect customer' comment actually seem to authenticate the user fine. The problem being when I redirect to another page with RedirectResponse, then the authentication is lost.

I've tried a call to

$this->container->get('security.context')->isGranted('ROLE_USER')

which returns true just before the call to RedirectResponse, and false in my other controller where the response is being redirected.

At this point I'm a bit confused about what I'm doing wrong. Any ideas appreciated. Btw, I'm using Symfony2.1

score 1 · Answer 1 · answered Oct 01 '12 at 20:47

1

I've noticed this happens when you redirect more than once at a time. Does the controller for the MyBundle_index route return another redirect? If so, I think that's your answer.

Otherwise, maybe try using forwards? Instead of:

return new RedirectResponse($this->generateUrl('MyBundle_index'));

...just forward to whatever controller/action is defined for that route:

return $this->forward("SomeBundle:Default:index");

The URL that the user ends up with in their address bar might not be what you're expecting (it won't change from the one they requested originally), but you can probably fiddle with that to get it to your liking.

answered Oct 01 '12 at 20:47

Thomas Kelley

10,187
1
36
43

My other controller basically just renders a template as so: `return $this->render('MyBundleBundle:Homepage:index.html.twig');` – SebScoFr Oct 02 '12 at 05:59
Interesting. Here's an article that says you might need to persist that token to the session. Hopefully it might help? http://techblog.zabuchy.net/2012/manually-authenticate-symfony-2-user/ – Thomas Kelley Oct 02 '12 at 16:40
1

Well as you can see on my last answer I managed to solve it. Thanks for your help anyway ! – SebScoFr Oct 02 '12 at 21:35

score 1 · Answer 2 · answered Oct 02 '12 at 21:34

Ok I solved it like so:

$token = new UsernamePasswordToken($customer->getEmail(), null, 'api_auth', array('ROLE_USER'));

Apparently I needed to pass the customer id (in that case the email) as the first argument of UsernamePasswordToken, instead of the entire customer object. I'm not sure why since my entity Customer has a _toString method implemented, but at least it works fine like that.

Symfony2 - Authentication lost after redirection

2 Answers2

Linked