svc/profile-bundle

Package to handle profiles (change password, change mail)

6.3.0 2025-09-14 13:04 UTC

Requires

• php: ^8.2
• doctrine/doctrine-bundle: ^2.10
• doctrine/orm: ^2.15 | ^3
• svc/util-bundle: ^5|^6|dev-main
• symfony/form: ^6.4|^7
• symfony/framework-bundle: ^6.4|^7
• symfony/security-bundle: ^6.4|^7
• symfony/translation: ^6.4|^7
• symfony/twig-bundle: ^6.4|^7
• symfony/ux-toggle-password: ^2.13
• symfony/validator: ^6.4|^7

Requires (Dev)

• phpstan/phpstan: ^2.1
• phpstan/phpstan-doctrine: ^2.0
• phpunit/phpunit: ^12.3
• symfony/browser-kit: ^6.4|^7

Suggests

• karser/karser-recaptcha3-bundle: Could by used in the contact form

MIT

• Sven Vetter

README

⚠️ Breaking Change in Version 6.3.0:
Starting with version 6.3.0, the bundle uses PHP format for route configuration instead of YAML. You need to import the routes manually in your project. See Usage for updated installation instructions.

⚠️ Attention:
From version 6.0 the bundle works only with Symfony >=6.4.
The bundle uses "symfony/ux-toggle-password" for password visibility toggle. For installations without this requirement, please use a version <6.0.

From version 4.0 the bundle works only with Symfony >=6.1, because the new Bundle Configuration System is used.

Please use version 3.x for older Symfony installations.

Bundle with two functions:

• Change user password (with email information)
• Change user email address (with email confirmation)

Security Features

• XSS Protection: All user input is properly validated and sanitized
• Email Validation: Comprehensive validation including disposable email domain blocking
• Token Security: Secure token generation with HMAC-SHA256 hashing
• Rate Limiting Ready: Designed to work with rate limiting implementations

Documentation

• Installation
• Usage
• Migration Guide - Important for v6.3.0+ upgrades

Screenshots

Change mail form

Change password form