Search Results | SymfonyCasts

1000 search results

Sort By

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

Access Token Authenticator

            Copy Code

                            Show All Lines

                        52 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 11
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 13 - 15
                            
                    main:
        
                Show Lines

                                                    // ... lines 17 - 24
                            
                        access_token:
        
                            token_handler: App\Security\ApiTokenHandler
        
                Show Lines

                                                    // ... lines 27 - 52

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

Deny Access with The "security" Option

            Copy Code

                            Show All Lines

                        56 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 37
                            
                # Easy way to control access for large sections of your site
        
                # Note: Only the *first* access control that matches will be used
        
                access_control:
        
                    # - { path: ^/admin, roles: ROLE_ADMIN }
        
                    # - { path: ^/profile, roles: ROLE_USER }
        
                Show Lines

                                                    // ... lines 43 - 56

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

API Token Scopes

            Copy Code

                            Show All Lines

                        56 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 12
                            
                role_hierarchy:
        
                    ROLE_FULL_USER: [ROLE_USER_EDIT, ROLE_TREASURE_CREATE, ROLE_TREASURE_EDIT]
        
                Show Lines

                                                    // ... lines 15 - 56

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

Logout & Passing API Data to JavaScript

            Copy Code

                            Show All Lines

                        50 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 11
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 13 - 15
                            
                    main:
        
                Show Lines

                                                    // ... lines 17 - 22
                            
                        logout:
        
                            path: app_logout
        
                Show Lines

                                                    // ... lines 25 - 50

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

API Login Form with json_login

            Copy Code

                            Show All Lines

                        46 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 11
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 13 - 15
                            
                    main:
        
                Show Lines

                                                    // ... lines 17 - 18
                            
                        json_login:
        
                            check_path: app_login
        
                Show Lines

                                                    // ... lines 21 - 46

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

API Login Form with json_login

            Copy Code

                            Show All Lines

                        48 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 11
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 13 - 15
                            
                    main:
        
                Show Lines

                                                    // ... lines 17 - 18
                            
                        json_login:
        
                            check_path: app_login
        
                            username_path: email
        
                            password_path: password
        
                Show Lines

                                                    // ... lines 23 - 48

See Code Block in Script

Code

Learn APIs

API Platform 3 Part 2: Security for your Treasures

API Login Form with json_login

            Copy Code

                            Show All Lines

                        48 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 4
                            
                # https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
        
                providers:
        
                    # used to reload user from session & other features (e.g. switch_user)
        
                    app_user_provider:
        
                        entity:
        
                            class: App\Entity\User
        
                            property: email
        
                Show Lines

                                                    // ... lines 12 - 48

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

2 Factor Authentication & Authentication Tokens

            Copy Code

                            Show All Lines

                        71 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 20
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 22 - 24
                            
                    main:
        
                Show Lines

                                                    // ... lines 26 - 49
                            
                        two_factor:
        
                            auth_form_path: 2fa_login
        
                            check_path: 2fa_login_check
        
                Show Lines

                                                    // ... lines 53 - 71

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

2 Factor Authentication & Authentication Tokens

            Copy Code

                            Show All Lines

                        71 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 61
                            
                access_control:
        
                    # This makes the logout route accessible during two-factor authentication. Allows the user to
        
                    # cancel two-factor authentication, if they need to.
        
                    - { path: ^/logout, role: PUBLIC_ACCESS }
        
                    # This ensures that the form can only be accessed when two-factor authentication is in progress.
        
                    - { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
        
                    - { path: ^/admin/login, roles: PUBLIC_ACCESS }
        
                    - { path: ^/admin, roles: ROLE_ADMIN }
        
                    # - { path: ^/profile, roles: ROLE_USER }

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

2 Factor Authentication & Authentication Tokens

            Copy Code

                            Show All Lines

                        71 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 61
                            
                access_control:
        
                Show Lines

                                                    // ... lines 63 - 65
                            
                    # This ensures that the form can only be accessed when two-factor authentication is in progress.
        
                    - { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
        
                Show Lines

                                                    // ... lines 68 - 71

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

2 Factor Authentication & Authentication Tokens

            Copy Code

                            Show All Lines

                        71 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 61
                            
                access_control:
        
                    # This makes the logout route accessible during two-factor authentication. Allows the user to
        
                    # cancel two-factor authentication, if they need to.
        
                    - { path: ^/logout, role: PUBLIC_ACCESS }
        
                Show Lines

                                                    // ... lines 66 - 71

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

Activating 2FA

            Copy Code

                            Show All Lines

                        71 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 61
                            
                access_control:
        
                Show Lines

                                                    // ... lines 63 - 65
                            
                    # This ensures that the form can only be accessed when two-factor authentication is in progress.
        
                    - { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
        
                Show Lines

                                                    // ... lines 68 - 71

See Code Block in Script

Code

Learn Symfony 5

Netgen Layouts: Building Pages with Symfony

Creating & Mapping Layouts

            Copy Code

                            Show All Lines

                        56 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 6
                            
                role_hierarchy:
        
                    ROLE_ADMIN: [ROLE_USER, ROLE_NGLAYOUTS_ADMIN]
        
                Show Lines

                                                    // ... lines 9 - 56

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Hunting Down the Final Deprecations

            Copy Code

                            Show All Lines

                        59 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 38
                            
                access_control:
        
                Show Lines

                                                    // ... lines 40 - 41
                            
                    - { path: ^/logout, role: PUBLIC_ACCESS }
        
                    - { path: ^/admin/login, roles: PUBLIC_ACCESS }
        
                Show Lines

                                                    // ... lines 44 - 59

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Password encoders -> password_hashers & debug:firewall

            Copy Code

                            Show All Lines

                        63 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 11
                            
                password_hashers:
        
                    Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
        
                Show Lines

                                                    // ... lines 14 - 63

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Security Upgrades

            Copy Code

                            Show All Lines

                        64 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 9
                            
                enable_authenticator_manager: false
        
                Show Lines

                                                    // ... lines 11 - 64

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Recipe Upgrades: Part 2!

            Copy Code

                            Show All Lines

                        64 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 9
                            
                enable_authenticator_manager: false
        
                Show Lines

                                                    // ... lines 11 - 64

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Recipe Upgrades: Part 2!

            Copy Code

                            Show All Lines

                        64 lines
            |
            config/packages/security.yaml
        
            security:
        
                encoders:
        
                    App\Entity\User:
        
                        algorithm: auto
        
                Show Lines

                                                    // ... lines 5 - 11
                            
                password_hashers:
        
                    Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
        
                Show Lines

                                                    // ... lines 14 - 64

See Code Block in Script

Code

Learn Symfony 6

Upgrading & What's New in Symfony 6!

Recipe Upgrades: Part 2!

            Copy Code

                            Show All Lines

                        64 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 20
                            
                firewalls:
        
                Show Lines

                                                    // ... lines 22 - 24
                            
                    main:
        
                        lazy: true
        
                        provider: app_user_provider
        
                        guard:
        
                            authenticators:
        
                                - App\Security\LoginFormAuthenticator
        
                        logout:
        
                            path: app_logout
        
                Show Lines

                                                    // ... lines 33 - 64

See Code Block in Script

Code

Learn Symfony 5

Symfony 5 Security: Authenticators

Creating a Security Event Subscriber

            Copy Code

                            Show All Lines

                        62 lines
            |
            config/packages/security.yaml
        
            security:
        
                Show Lines

                                                    // ... lines 2 - 20
                            
                firewalls:
        
                    dev:
        
                Show Lines

                                                    // ... lines 23 - 24
                            
                    main:
        
                        lazy: true
        
                        provider: app_user_provider
        
                        entry_point: form_login
        
                        login_throttling: true
        
                        form_login:
        
                            login_path: app_login
        
                            check_path: app_login
        
                            username_parameter: email
        
                            password_parameter: password
        
                            enable_csrf: true
        
                        custom_authenticator:
        
                        #    - App\Security\LoginFormAuthenticator
        
                            - App\Security\DummyAuthenticator
        
                        logout: true
        
                        remember_me:
        
                            secret: '%kernel.secret%'
        
                            signature_properties: [password]
        
                            always_remember_me: true
        
                        switch_user: true
        
                Show Lines

                                                    // ... lines 49 - 62

See Code Block in Script

	security:
Show Lines	// ... lines 2 - 11
	firewalls:
Show Lines	// ... lines 13 - 15
	main:
Show Lines	// ... lines 17 - 24
	access_token:
	token_handler: App\Security\ApiTokenHandler
Show Lines	// ... lines 27 - 52

	security:
Show Lines	// ... lines 2 - 37
	# Easy way to control access for large sections of your site
	# Note: Only the first access control that matches will be used
	access_control:
	# - { path: ^/admin, roles: ROLE_ADMIN }
	# - { path: ^/profile, roles: ROLE_USER }
Show Lines	// ... lines 43 - 56

	security:
Show Lines	// ... lines 2 - 12
	role_hierarchy:
	ROLE_FULL_USER: [ROLE_USER_EDIT, ROLE_TREASURE_CREATE, ROLE_TREASURE_EDIT]
Show Lines	// ... lines 15 - 56

	security:
Show Lines	// ... lines 2 - 4
	# https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
	providers:
	# used to reload user from session & other features (e.g. switch_user)
	app_user_provider:
	entity:
	class: App\Entity\User
	property: email
Show Lines	// ... lines 12 - 48

	security:
Show Lines	// ... lines 2 - 20
	firewalls:
Show Lines	// ... lines 22 - 24
	main:
Show Lines	// ... lines 26 - 49
	two_factor:
	auth_form_path: 2fa_login
	check_path: 2fa_login_check
Show Lines	// ... lines 53 - 71

	security:
Show Lines	// ... lines 2 - 61
	access_control:
	# This makes the logout route accessible during two-factor authentication. Allows the user to
	# cancel two-factor authentication, if they need to.
	- { path: ^/logout, role: PUBLIC_ACCESS }
	# This ensures that the form can only be accessed when two-factor authentication is in progress.
	- { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
	- { path: ^/admin/login, roles: PUBLIC_ACCESS }
	- { path: ^/admin, roles: ROLE_ADMIN }
	# - { path: ^/profile, roles: ROLE_USER }

	security:
Show Lines	// ... lines 2 - 6
	role_hierarchy:
	ROLE_ADMIN: [ROLE_USER, ROLE_NGLAYOUTS_ADMIN]
Show Lines	// ... lines 9 - 56

	security:
Show Lines	// ... lines 2 - 38
	access_control:
Show Lines	// ... lines 40 - 41
	- { path: ^/logout, role: PUBLIC_ACCESS }
	- { path: ^/admin/login, roles: PUBLIC_ACCESS }
Show Lines	// ... lines 44 - 59

	security:
Show Lines	// ... lines 2 - 9
	enable_authenticator_manager: false
Show Lines	// ... lines 11 - 64

	security:
	encoders:
	App\Entity\User:
	algorithm: auto
Show Lines	// ... lines 5 - 11
	password_hashers:
	Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
Show Lines	// ... lines 14 - 64