Questions tagged [symfony-security]

The Symfony security component is a standalone library that can be used outside of Symfony2 projects.

Symfony security component provides a complete security system for your web application. It ships with facilities for authenticating using HTTP basic or digest authentication, interactive form login or X.509 certificate login, but also allows you to implement your own authentication strategies. Furthermore, the component provides ways to authorize authenticated users based on their roles, and it contains an advanced ACL system.

Useful links

276 questions
0
votes
1 answer

Symfony Workflow Component and Security Voters?

TL;DR: how can you add custom constraints (i.e. security voters) to transitions? My application needs some workflow management system, so I'd like to try Symfony's new Workflow Component. Let's take a Pull Request workflow as an example. In this…
Stephan Vierkant
  • 9,674
  • 8
  • 61
  • 97
0
votes
1 answer

Using multiple security providers for each URI in Symfony2

Straight forward to question, How can I use different security providers for different URI patterns in security.yml?, here is the scenario: there are some URIs in routing.yml as follow: / with no security and available for everyone /admin which is…
Aien Saidi
  • 159
  • 7
  • 25
0
votes
1 answer

Symfony 2.8 Guard AbstractGuardAuthenticator, how to return a real token?

I'm playing around with AbstractGuardAuthenticator from the relatively new Guard subsystem added in Symfony 2.8. My setup is really simple. I send a request to a protected URL which takes a username:password base64 encoded. It checks both against…
G_V
  • 2,396
  • 29
  • 44
0
votes
0 answers

Silex programmatically login with custom domain

I have a few silex applications and there is a subdomain for each app. (app1.example.com, app2.example.com) I want to manage login process from a main silex single app. Following code can make programmatically login, but I want to change cookie's…
Berkay Yildiz
  • 595
  • 7
  • 23
0
votes
0 answers

Symfony 2.8 security setup with LightSamlPhp Bundle - Multiple Login Methods

I am running into an issue with setting up Authentication in Symfony 2.8 with Saml plugin (https://www.lightsaml.com/SP-Bundle/Getting-started/). Problem: I want to able to login via SAML and via going to admin page. The /admin/login page works…
0
votes
2 answers

Symfony + FOSUserBundle can't login

I'm using Symfony 3.1 with FOSUserBundle. I read the docs and integrated FOS in Symfony, here all right, the registration seems to work well and persists the data to the DB, BUT, if I try to login I get redirected again to the login page as an…
Francesco
  • 555
  • 4
  • 23
0
votes
2 answers

Why I can't login in symfony through programming?

I tried to login symfony by programming, but when redirect to new route the user return to anon. user. security.yml security: encoders: Symfony\Component\Security\Core\User\User: plaintext providers: in_memory: …
0
votes
1 answer

Silex (Symfony 3 components) all parameters configuration list

I started learning silex framework (based on symfony). I write code like this $app->register(new \Silex\Provider\SecurityServiceProvider(), [ 'security.firewalls' => [ 'admin' => [ 'pattern' => '^/admin', 'form' => ['login_path'…
Mati
  • 753
  • 4
  • 20
0
votes
3 answers

Symfony Login form with existing user class

I'm trying to use (and understand) how Security works in Symfony. I've created a login form and it works with hard-coded users. Now I want to use an existing user table in my database. The table has all the requiered fields but with different column…
DavidL
  • 1,120
  • 1
  • 15
  • 34
0
votes
0 answers

Is ROLE_ADMIN needed on this setup?

I need some help setting up some ROLE hierarchy configuration under Symfony2 project. I have two areas frontend where users with ROLE_CHAT should be able to login and backend where only ROLE_ADMIN is allowed. I have two more roles: ROLE_EXECUTIVE…
ReynierPM
  • 17,594
  • 53
  • 193
  • 363
0
votes
1 answer

Symfony2 User not defined in Twig Exception Controller

I use my own action in order to handle exception in twig. # Twig Configuration twig: exception_controller: MyBundle:Default:showException The problem is that, i'm actually authenticated to my application, but in this special Controller the…
Senorihl
  • 312
  • 2
  • 16
0
votes
1 answer

Symfony3 Extending UserRepository With UserLoaderInterface & Using Encryption, Login Not Working

I can't login to my restricted areas. I'm following the tutorials on symfony.com. I'll provide my security.yml file. # To get started with security, check out the documentation: # http://symfony.com/doc/current/book/security.html security: …
Joseph Astrahan
  • 8,659
  • 12
  • 83
  • 154
0
votes
1 answer

Embed formated ACL information to JSON in Symfony2

I am using Symfony2 and its ACL security component in my project. I want to use the ACL information in the frontend framework for show/hide elements. Would it be a terrible idea security wise to attach formated ACL information for current user on…
andrius.k
  • 799
  • 1
  • 10
  • 26
0
votes
1 answer

How can I accept any username and password in Symfony 2?

I have the following configuration options for my Symfony 2.6 application: security: encoders: Symfony\Component\Security\Core\User\User: plaintext firewalls: dev: pattern: ^/(_(profiler|wdt)|css|images|js)/ …
Radu Murzea
  • 10,724
  • 10
  • 47
  • 69
0
votes
1 answer

Symfony + fosuserbundle + security issue with firewalls

I was having trouble with symfony security + fos user bundle. I couldn't find anybody that replicated my problem, only similar problems but the solutions are not working. All the pages including / has to be secured except…
tmas
  • 422
  • 4
  • 15