knpuniversity / guard-bundle
This Bundle provides Guard-style authentication in Symfony
Installs: 28 909
Dependents: 0
Suggesters: 0
Security: 0
Stars: 45
Watchers: 10
Forks: 5
Open Issues: 0
Type:symfony-bundle
Requires
- php: >=5.3.9
- knpuniversity/guard: ~0.1
- symfony/framework-bundle: ~2.3
- symfony/security-bundle: ~2.6
This package is auto-updated.
Last update: 2022-02-17 20:49:01 UTC
README
Add simple and beautiful authentication to your Symfony project.
This library is deprecated since Symfony 2.8 and won't work with Symfony 3.
The original purpose was to get feedback and use-cases from people so that we can merge this feature into Symfony itself (see symfony/symfony#14673).
Now it's good (see news from Symfony).
Upgrade to Symfony 3
On Symfony 2.8, use the official Guard component.
Step 1 - Remove the library from your composer.json
Be sure to be on Symfony 2.8, open composer.json
file and remove the library:
Before:
{ "require": { "php": ">=5.5", "symfony/symfony": "~2.8", "...": "...", "knpuniversity/guard-bundle": "~0.1@dev" }, }
Now:
{ "require": { "php": ">=5.5", "symfony/symfony": "~2.8", "...": "..." }, }
Step 2 - Remove it from your AppKernel
If you're using the Symfony framework, remove the KnpUGuardBundle from AppKernel.php
.
Step 3 - Modify firewall(s)
Open and modify security.yml
file, replace in your firewall(s) key(s) knpu_guard
by guard
:
Before:
# app/config/security.yml security: # ... firewalls: # ... main: anonymous: ~ logout: ~ knpu_guard: authenticators: - app.form_login_authenticator # maybe other things, like form_login, remember_me, etc # ...
Now:
# app/config/security.yml security: # ... firewalls: # ... main: anonymous: ~ logout: ~ guard: authenticators: - app.form_login_authenticator # maybe other things, like form_login, remember_me, etc # ...
Step 4 - Update Authenticator(s)
Update uses in Authenticator(s) class(es).
Warning: checkCredentials() NOW must return true in order for authentication to be successful. In KnpUGuard, if you did NOT throw an AuthenticationException, it would pass.
Before:
use KnpU\Guard\Authenticator\AbstractFormLoginAuthenticator; use KnpU\Guard\...; // ... class FormLoginAuthenticator extends AbstractFormLoginAuthenticator { // ... public function checkCredentials($credentials, UserInterface $user) { // ... if ($password !== 'correctPassword') { throw new AuthenticationException(); } // do nothing, allow authentication to pass } // ... }
Now:
use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator; use Symfony\Component\Security\Guard\...; // ... class FormLoginAuthenticator extends AbstractFormLoginAuthenticator { // ... public function checkCredentials($credentials, UserInterface $user) { // ... if ($password !== 'correctPassword') { // returning anything NOT true will cause an authentication failure return; // or, you can still throw an AuthenticationException if you want to // throw new AuthenticationException(); } // return true to make authentication successful return true; } // ... }
Step 5 - Yes we can test it
Upgrade to Symfony 3 (won't be worst than from Symfony 1 to Symfony 2) ;-)
- http://symfony.com/doc/current/cookbook/upgrade/major_version.html
- https://knpuniversity.com/screencast/new-symfony-2.2/symfony3
Documentation
Find a full tutorial here: https://knpuniversity.com/screencast/guard
Basic Usage
Check out the Tutorial for real documentation. But here's the basic idea.
Guard works by creating a single class - an authenticator - that handles everything about how you want to authenticate your users. And authenticator implements KnpU\Guard\GuardAuthenticatorInterface)
Here are some real-world examples from the tutorial:
Goal | Code | Tutorial |
---|---|---|
Authenticate by reading an X-TOKEN header |
ApiTokenAuthenticator.php | How to Authenticate via an API Token |
Form login authentication | FormLoginAuthenticator.php | How to Create a Login Form |
Social Login (Facebook) | FacebookAuthenticator.php | Social Login with Facebook |
Contributing
Find a bug or a use-case that this doesn't support? Open an Issue so we can make things better.
License
This library is under the MIT license. See the complete license in the LICENSE file.