Chapters

36 Chapters | 1:50:44 |

01

Introduction

0:44
02

Security Fundamentals

3:47
03

Authorization with Access Control

2:08
04

Creating a Login Form (Part 1)

4:46
05

Creating a Login Form (Part 2)

3:57
06

Logging Out and Cleaning Up

5:03
07

Twig Security and IS_AUTHENTICATED_FULLY

2:41
08

Denying Access: AccessDeniedException

4:23
09

Entity Security

4:32
10

Saving Users

3:37
11

Adding Dynamic Roles to each User

4:56
12

Repository Security

4:20
13

Doctrine’s QueryBuilder

2:25
14

The UserProvider: Custom Logic to Load Security Users

3:15
15

User Serialization

2:16
16

Registration Form

3:11
17

Form Rendering

4:38
18

Using More Fields: email and repeated

2:31
19

Handling Form Submissions

4:22
20

Form: Default Data

2:10
21

Cleaning up with a plainPassword Field

1:34
22

Using an External Form Type Class

2:40
23

Registration Validation

3:36
24

Server-Side Validation

4:18
25

Adding a Flash Message

1:35
26

Automatically Authenticating after Registration

0:55
27

Functional Testing

5:04
28

Testing Forms

3:21
29

Controlling Data / Fixtures in a Test

3:23
30

More about Container, the “doctrine” Service and the Entity Manager

1:54
31

After-dinner Mint

3:35
32

Security: Creating Roles and Role Hierarchies

2:50
33

Switching Users / Impersonation

1:09
34

Whitelisting: Securing all Pages, except a few

2:15
35

Accessing the User

1:09
36

Remember Me Functionality

1:44

This tutorial has a new version, check it out!

> Symfony 2 > Starting in Symfony2: Course 2 (2.4+)

Buy Access to Course

02.

Security Fundamentals

|

Autoplay

Previous Chapter

Next Chapter

Login or register to check out the script

8 Comments

Sort By

Login or Register to join the conversation

Raimen 8 years ago

Hi Ryan,

two questions,

1) Symfony documentation looks a bit confusing to me. Many of the configuration block seems to be missing in the documentation.

For example, if you see these screenshots: http://imgur.com/YUK84Fa , which is taken from this page: https://symfony.com/doc/cur....

Or this: http://imgur.com/DF6chdT, taken from https://symfony.com/doc/cur...

another: http://imgur.com/aVPq9SP

How the new symfony users would understand the security.yml will look like - is there any straight-forward way? Would be very kind if you can point this in the documentation, not this tutorial.

2) You mentioned in this screencast, "If your security.yml file is mostly empty, don’t worry! You installed Symfony in a slightly different way." - what is the other way of installation to get a bit more descriptive security.yml?

Thanks in advance Ryan.

|

weaverryan SFCASTS Raimen 8 years ago

Hey Raimen!

1) Wow, I'm so glad you reported this! The missing code blocks are a bug on the symfony.com servers - I just reported it (it's a big bug, many code blocks are missing). This will be fixed very soon: you are not missing anything :).

2) Actually, I don't think that either of the ways of installation (the other being the create-project method) give you a very descriptive security.yml file anymore. But that's by design: the files used to come with *a lot* of stuff you didn't need. To see a complete security.yml file, you can of course download the code from this screencast. But also, take a look at the symfony-demo: https://github.com/symfony/...

Cheers!

|

Raimen weaverryan 8 years ago

Thanks Ryan!

|

Jelle S. 8 years ago

How can I run this course's code? With the command I use for starting the server I get this:

$ php app/console server:start

PHP Warning: require_once(D:\media\downloads\knpuniversity\symfony2-ep3\start\a
pp/bootstrap.php.cache): failed to open stream: No such file or directory in D:\
media\downloads\knpuniversity\symfony2-ep3\start\app\console on line 10

Warning: require_once(D:\media\downloads\knpuniversity\symfony2-ep3\start\app/bo
otstrap.php.cache): failed to open stream: No such file or directory in D:\media
\downloads\knpuniversity\symfony2-ep3\start\app\console on line 10
PHP Fatal error: require_once(): Failed opening required 'D:\media\downloads\kn
puniversity\symfony2-ep3\start\app/bootstrap.php.cache' (include_path='C:\xampp\
php\PEAR') in D:\media\downloads\knpuniversity\symfony2-ep3\start\app\console on
line 10

Fatal error: require_once(): Failed opening required 'D:\media\downloads\knpuniv
ersity\symfony2-ep3\start\app/bootstrap.php.cache' (include_path='C:\xampp\php\P
EAR') in D:\media\downloads\knpuniversity\symfony2-ep3\start\app\console on line
10

|

weaverryan SFCASTS Jelle S. 8 years ago edited

Yo Jelle S.!

Make sure you run composer install first. This is now an older tutorial - our newer tutorials all have accurate README.md files with all the setup details, but this one is missing some of those details. You'll also need to run a few database setup commands, which should be:


app/console doctrine:database:create
app/console doctrine:schema:update --force
app/console doctrine:fixtures:load

Cheers!

|

Léo Li 8 years ago edited

Hi there, I got a problem. Since I use Symfony 2.7, I get totally different security.yml, and I don't know how to edit it to make it works like the one in this video, can someone help?

It looks like this:


# To get started with security, check out the documentation:
# http://symfony.com/doc/current/book/security.html
security:
    # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
    providers:
        in_memory:
            memory: ~
    firewalls:
        # disables authentication for assets and the profiler, adapt it according to your needs
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        main:
            anonymous: ~
            # activate different ways to authenticate
            # http_basic: ~

            # http://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate
            # form_login: ~
            # http://symfony.com/doc/current/cookbook/security/form_login_setup.html

|

weaverryan SFCASTS Léo Li 8 years ago edited

Hey Léo!

You're right - in later versions of Symfony, the default security.yml looks smaller and simpler. But that's ok - it's just a starting point, and you can modify it however you want. At the end of this chapter, the security.yml file from the video looks like the code block below. This isn't fully functional yet - we go onto continue updating it in the next chapters. But if you want to use this as a starting point for what things should look like at the end of this chapter, this should work.

Cheers!


security:
    encoders:
        Symfony\Component\Security\Core\User\User: plaintext

    role_hierarchy:
        ROLE_ADMIN:       ROLE_USER
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        in_memory:
            memory:
                users:
                    user:  { password: userpass, roles: [ 'ROLE_USER' ] }
                    admin: { password: adminpass, roles: [ 'ROLE_ADMIN' ] }

    firewalls:
        secured_area:
            pattern:    ^/
            form_login:
                check_path: _security_check
                login_path: /my-login-url
        logout:
            path:   _demo_logout
            target: _demo
        anonymous: ~
        #http_basic:
        #    realm: "Secured Demo Area"

    access_control:
        #- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY, requires_channel: https }

|

Léo Li weaverryan 8 years ago

Ok, thank you.

|

Symfony 2

What PHP libraries does this tutorial use?

// composer.json
{
    "require": {
        "php": ">=5.3.3",
        "symfony/symfony": "~2.4", // v2.4.2
        "doctrine/orm": "~2.2,>=2.2.3", // v2.4.2
        "doctrine/doctrine-bundle": "~1.2", // v1.2.0
        "twig/extensions": "~1.0", // v1.0.1
        "symfony/assetic-bundle": "~2.3", // v2.3.0
        "symfony/swiftmailer-bundle": "~2.3", // v2.3.5
        "symfony/monolog-bundle": "~2.4", // v2.5.0
        "sensio/distribution-bundle": "~2.3", // v2.3.4
        "sensio/framework-extra-bundle": "~3.0", // v3.0.0
        "sensio/generator-bundle": "~2.3", // v2.3.4
        "incenteev/composer-parameter-handler": "~2.0", // v2.1.0
        "doctrine/doctrine-fixtures-bundle": "~2.2.0", // v2.2.0
        "ircmaxell/password-compat": "~1.0.3", // 1.0.3
        "phpunit/phpunit": "~4.1" // 4.1.0
    }
}

Previous Chapter

Next Chapter