我在使用Silex和安全服务时遇到了点小问题。
当用户将他的数据(正确)输入到我的登录表单时，它不会被重定向到应用程序url。他仍然在同一个页面中，并且在登录表单页面中进行调试，安全提供程序中没有任何内容表明他已经过身份验证。但是，在"成功登录"之后，如果我直接在浏览器中输入url，我就可以访问了，因为我经过了身份验证。类似这样的过程:
首页->登录检查(登录ok) ->首页(未认证)->/app(已认证)
我希望它直接重定向到/app，如果登录工作正常，并理解为什么在我的主页，即使成功登录后，安全提供商一直说我没有经过身份验证。
我正在写下面的代码:
index . php
<?php
use SymfonyComponentHttpFoundationRequest;
use SymfonyComponentValidatorConstraints as Assert;
require_once __DIR__.'/../vendor/autoload.php';
$app = new SilexApplication();
/**
* App Registrations & Debug Setting
*/
$app
->register(new SilexProviderTwigServiceProvider(), array('twig.path' => __DIR__.'/../views'))
->register(new SilexProviderUrlGeneratorServiceProvider())
->register(new SilexProviderSessionServiceProvider())
->register(new SilexProviderFormServiceProvider())
->register(new SilexProviderValidatorServiceProvider())
->register(new SilexProviderTranslationServiceProvider(), array(
'translator.messages' => array(),
))
->register(new SilexProviderDoctrineServiceProvider(), array(
'db.options' => array(
'driver' => 'pdo_mysql',
'dbname' => 'pomodesk',
'host' => 'localhost',
'user' => 'root',
'password' => 'root'
)
))
->register(new SilexProviderSecurityServiceProvider(), array(
'security.firewalls' => array(
'app' => array(
'pattern' => '^/app',
'http' => true,
'form' => array('login_path' => '/', 'check_path' => '/app/login_check'),
'logout' => array('logout_path' => '/app/logout'),
'anonymous' => false,
'users' => $app->share(function () use ($app) {
return new PomodeskProviderUserProvider($app['db']);
})
),
),
'security.access_rules' => array(
array('^/app', 'ROLE_USER')
)
));
$app['debug'] = true;
/**
* App Routes
*/
$app->get('/', function(Request $request) use ($app) {
$form = $app['form.factory']
->createBuilder('form')
->add('name', 'text')
->add('email', 'text')
->add('password', 'password')
->getForm();
if ('POST' == $request->getMethod()) {
$form->bind($request);
$data = $form->getData();
$constraint = new AssertCollection(array(
'name' => array(new AssertLength(array('min' => 5)), new AssertNotBlank()),
'email' => new AssertEmail(),
'password' => array(new AssertLength(array('min' => 6)), new AssertNotBlank())
));
$errors = $app['validator']->validateValue($data, $constraint);
$userProvider = new PomodeskProviderUserProvider($app['db']);
try {
$duplicated = $userProvider->loadUserByUsername($data['email']);
} catch (Exception $e) {
$duplicated = false;
}
if ($form->isValid() && count($errors) < 1 && !$duplicated) {
$user = new SymfonyComponentSecurityCoreUserUser($data['email'], '', array('ROLE_USER'));
$encoder = $app['security.encoder_factory']->getEncoder($user);
$insertion = $app['db']->insert(
'user',
array(
'email' => $data['email'],
'name' => $data['name'],
'password' => $encoder->encodePassword($data['password'], $user->getSalt()),
'roles' => 'ROLE_USER'
)
);
return $app['twig']->render('home.html.twig', array(
'username' => $data['email'],
'signup' => true
));
}
return $app['twig']->render('home.html.twig', array(
'username' => $data['email'],
'signup' => true
));
}
return $app['twig']->render('home.html.twig', array(
'error' => $app['security.last_error']($request),
'last_username' => $app['session']->get('_security.last_username'),
'form' => $form->createView()
));
})
->method('GET|POST')
->bind('home');
$app->get('/app', function() use ($app) {
$app['app_js'] = $app['twig']->render('script.js.twig');
$data = array();
return $app['twig']->render('app.html.twig', $data);
})
->bind('app_home');
$app->run();
UserProvider.php
<?php
namespace PomodeskProvider;
use SymfonyComponentSecurityCoreUserUserProviderInterface;
use SymfonyComponentSecurityCoreUserUserInterface;
use SymfonyComponentSecurityCoreUserUser;
use SymfonyComponentSecurityCoreExceptionUnsupportedUserException;
use SymfonyComponentSecurityCoreExceptionUsernameNotFoundException;
use DoctrineDBALConnection;
class UserProvider implements UserProviderInterface
{
private $conn;
public function __construct(Connection $conn)
{
$this->conn = $conn;
}
public function loadUserByUsername($username)
{
$stmt = $this->conn->executeQuery('SELECT * FROM user WHERE email = ?', array(strtolower($username)));
if (!$user = $stmt->fetch()) {
throw new UsernameNotFoundException(sprintf('Email "%s" does not exist.', $username));
}
return new User($user['email'], $user['password'], explode(',', $user['roles']), true, true, true, true);
}
public function refreshUser(UserInterface $user)
{
if (!$user instanceof User) {
throw new UnsupportedUserException(sprintf('Instances of "%s" are not supported.', get_class($user)));
}
return $this->loadUserByUsername($user->getUsername());
}
public function supportsClass($class)
{
return $class === 'SymfonyComponentSecurityCoreUserUser';
}
}
非常感谢!
这样修改代码:
->register(new SilexProviderSecurityServiceProvider(), array(
'security.firewalls' => array(
'app' => array(
'pattern' => '^/',
'http' => true,
'form' => array('login_path' => '/', 'check_path' => '/app/login_check'),
'logout' => array('logout_path' => '/app/logout'),
'anonymous' => true,
'users' => $app->share(function () use ($app) {
return new PomodeskProviderUserProvider($app['db']);
})
),
),
'security.access_rules' => array(
array('^/app', 'ROLE_USER')
)
));
允许防火墙中的匿名用户，只使用访问规则保护/app路由。如果你不这样做，你就会有上下文问题，假设你想要一个自定义菜单，如果用户登录到你的应用程序的所有页面，即使是那些不安全的，你将无法做到这一点，如果你不共享安全上下文在所有的网站。
这些是你可以在表单数组中使用的一些选项，根据symfony doc:
# login success redirecting options (read further below)
always_use_default_target_path: false
default_target_path: /
target_path_parameter: _target_path
use_referer: false
所以重定向可以通过登录表单的隐藏输入来处理，或者设置default_target_path
'form' => array(
'login_path' => '/',
'check_path' => '/app/login_check',
'default_target_path' => '/app',
'always_use_default_target_path' => true
),