1000 search results

Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
19 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 4
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
// ... lines 6 - 7
class UserVoter extends Voter
{
protected function supports($attribute, $object)
{
}
protected function voteOnAttribute($attribute, $object, TokenInterface $token)
{
// TODO: Implement voteOnAttribute() method.
}
}
See Code Block in Script
Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
35 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 8
class UserVoter extends Voter
{
// ... lines 11 - 17
protected function supports($attribute, $object)
{
if ($attribute != 'USER_VIEW') {
return false;
}
// ... lines 23 - 28
}
// ... lines 30 - 34
}
See Code Block in Script
Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
35 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 17
protected function supports($attribute, $object)
{
if ($attribute != 'USER_VIEW') {
return false;
}
if (!$object instanceof User) {
return false;
}
return true;
}
// ... lines 30 - 35
See Code Block in Script
Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
35 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 8
class UserVoter extends Voter
{
// ... lines 11 - 30
protected function voteOnAttribute($attribute, $object, TokenInterface $token)
{
// ... line 33
}
}
See Code Block in Script
Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
35 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 8
class UserVoter extends Voter
{
private $robot;
public function __construct(EvilSecurityRobot $robot)
{
$this->robot = $robot;
}
// ... lines 17 - 34
}
See Code Block in Script
Code

Learn Symfony 3

 >

The new Awesome of Symfony 3.0

 >

The new Voter Class
35 lines | src/AppBundle/Security/UserVoter.php
// ... lines 1 - 30
protected function voteOnAttribute($attribute, $object, TokenInterface $token)
{
return $this->robot->doesRobotAllowAccess();
}
See Code Block in Script
Blog
Introducing Guard: Symfony Security with a Smile

…HWIOAuthBundle exists, but it has a lot of security classes to make this happen. This problem was screaming for a solution. If we could make Symfony's authentication system simple and fun, the whole security system would go from a pain, to a powerful tool…

By weaverryan

Read Full Post
Code

Learn APIs

 >

Symfony RESTful API: Authentication with JWT (Course 4)

 >

JSON Errors in your API
30 lines | vendor/symfony/symfony/src/Symfony/Component/Security/Core/Exception/BadCredentialsException.php
// ... lines 1 - 19
class BadCredentialsException extends AuthenticationException
{
// ... lines 22 - 24
public function getMessageKey()
{
return 'Invalid credentials.';
}
}
See Code Block in Script
Comment

Learn Symfony 4

 >

Symfony Security: Beautiful Authentication, Powerful Authorization

 >

Adding a Custom Voter
…|css|images|js)/ security: false main: anonymous: ~ pattern: ^/ http_basic: ~ provider: db_user_provider form_login: login_path: app_login check_path: app_login default_target_path: / logout: path: app_logout target: / remember_me: secret: '%kernel.secret%' lifetime: 2592000 guard: authenticators: - App\Security\LoginFormAuthenticator…
Mouad E.
Mouad E.
Read Full Comment
Comment

Learn Symfony 4

 >

Symfony Security: Beautiful Authentication, Powerful Authorization

 >

Adding a Custom Voter
…|css|images|js)/ security: false main: anonymous: ~ pattern: ^/ http_basic: ~ provider: db_user_provider form_login: login_path: app_login check_path: app_login default_target_path: / logout: path: app_logout target: / remember_me: secret: '%kernel.secret%' lifetime: 2592000 guard: authenticators: - App\Security\LoginFormAuthenticator…
Mouad E.
Mouad E.
Read Full Comment
Code

Learn Symfony 3

 >

Symfony 3 Security: Beautiful Authentication, Powerful Authorization

 >

Role Hierarchy
86 lines | src/AppBundle/Controller/Admin/GenusAdminController.php
// ... lines 1 - 11
/**
* @Security("is_granted('ROLE_MANAGE_GENUS')")
* @Route("/admin")
*/
class GenusAdminController extends Controller
// ... lines 17 - 86
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 3: Custom Resources

 >

DTO Validation & Security
72 lines | src/ApiResource/UserApi.php
// ... lines 1 - 20
#[ApiResource(
// ... lines 22 - 35
security: 'is_granted("ROLE_USER")',
// ... lines 37 - 39
)]
// ... lines 41 - 43
class UserApi
{
// ... lines 46 - 70
}
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 2: Security for your Treasures

 >

Deny Access with The "security" Option
252 lines | src/Entity/User.php
// ... lines 1 - 20
#[ApiResource(
// ... lines 22 - 23
security: 'is_granted("ROLE_USER")',
)]
// ... lines 26 - 40
class User implements UserInterface, PasswordAuthenticatedUserInterface
{
// ... lines 43 - 250
}
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 2: Security for your Treasures

 >

Deny Access with The "security" Option
252 lines | src/Entity/User.php
// ... lines 1 - 25
#[ApiResource(
// ... lines 27 - 35
security: 'is_granted("ROLE_USER")',
)]
// ... lines 38 - 40
class User implements UserInterface, PasswordAuthenticatedUserInterface
{
// ... lines 43 - 250
}
See Code Block in Script
Comment

Learn Symfony 2

 >

Starting in Symfony2: Course 2 (2.4+)

 >

Denying Access: AccessDeniedException
Adding security checks in controller methods could quickly lead to massive code duplication. Say that I have a few controllers with a few dozens of methods - the code will be almost unmaintainable. So the question is: does Symphony have something like AOP to deal with…
Ivan
Ivan
Read Full Comment
Comment

Learn APIs

 >

API Platform 3 Part 2: Security for your Treasures

 >

API Token Scopes
Hey |mention:90254| `security.yaml` is the best place to keep your "static" user roles. I'm a bit confused about your question. What do you mean by "access that from the ApiToken entity" Cheers!
MolloKhan
MolloKhan
Read Full Comment
Code

Learn Symfony

 >

Lemon Squeezy Payment Processor

 >

Dynamic Data
117 lines | src/Controller/OrderController.php
// ... lines 1 - 12
use Symfony\Component\Security\Http\Attribute\CurrentUser;
// ... lines 14 - 15
class OrderController extends AbstractController
{
// ... lines 18 - 57
#[Route('/checkout', name: 'app_order_checkout')]
public function checkout(
// ... lines 60 - 62
#[CurrentUser] ?User $user,
): Response {
$lsCheckoutUrl = $this->createLsCheckoutUrl($lsClient, $cart, $user);
// ... lines 66 - 67
}
// ... line 69
private function createLsCheckoutUrl(HttpClientInterface $lsClient, ShoppingCart $cart, ?User $user): string
{
// ... lines 72 - 114
}
}
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 3: Custom Resources

 >

Quick! Create a DragonTreasure DTO
53 lines | src/Mapper/DragonTreasureEntityToApiMapper.php
// ... lines 1 - 7
use Symfony\Bundle\SecurityBundle\Security;
// ... lines 9 - 13
class DragonTreasureEntityToApiMapper implements MapperInterface
{
public function __construct(
// ... line 17
private Security $security,
)
{
}
// ... lines 22 - 33
public function populate(object $from, object $to, array $context): object
{
// ... lines 36 - 47
$dto->isMine = $this->security->getUser() && $this->security->getUser() === $entity->getOwner();
// ... lines 49 - 50
}
}
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 3: Custom Resources

 >

DTO Validation & Security
72 lines | src/ApiResource/UserApi.php
// ... lines 1 - 20
#[ApiResource(
// ... line 22
operations: [
// ... lines 24 - 25
new Post(
security: 'is_granted("PUBLIC_ACCESS")',
// ... line 28
),
// ... lines 30 - 33
],
// ... line 35
security: 'is_granted("ROLE_USER")',
// ... lines 37 - 39
)]
// ... lines 41 - 43
class UserApi
{
// ... lines 46 - 70
}
See Code Block in Script
Code

Learn APIs

 >

API Platform 3 Part 3: Custom Resources

 >

DTO Validation & Security
72 lines | src/ApiResource/UserApi.php
// ... lines 1 - 20
#[ApiResource(
// ... line 22
operations: [
// ... lines 24 - 25
new Post(
security: 'is_granted("PUBLIC_ACCESS")',
// ... line 28
),
new Patch(
security: 'is_granted("ROLE_USER_EDIT")'
),
// ... line 33
],
// ... line 35
security: 'is_granted("ROLE_USER")',
// ... lines 37 - 39
)]
// ... lines 41 - 43
class UserApi
{
// ... lines 46 - 70
}
See Code Block in Script
46 47 48 49 50