FOSUserBundle/Controller/SecurityController.php at master · torchello/FOSUserBundle · GitHub

History

77 lines (65 loc) · 2.77 KB

Raw

<?php

* This file is part of the FOSUserBundle package.

* (c) FriendsOfSymfony <http://friendsofsymfony.github.com/>

* For the full copyright and license information, please view the LICENSE

* file that was distributed with this source code.

namespace FOS\UserBundle\Controller;

use Symfony\Component\DependencyInjection\ContainerAware;

use Symfony\Component\HttpFoundation\Request;

use Symfony\Component\Security\Core\SecurityContext;

class SecurityController extends ContainerAware

{

public function loginAction(Request $request)

{

/** @var $session \Symfony\Component\HttpFoundation\Session\Session */

$session = $request->getSession();

// get the error if any (works with forward and redirect -- see below)

if ($request->attributes->has(SecurityContext::AUTHENTICATION_ERROR)) {

$error = $request->attributes->get(SecurityContext::AUTHENTICATION_ERROR);

} elseif (null !== $session && $session->has(SecurityContext::AUTHENTICATION_ERROR)) {

$error = $session->get(SecurityContext::AUTHENTICATION_ERROR);

$session->remove(SecurityContext::AUTHENTICATION_ERROR);

} else {

$error = '';

}

if ($error) {

// TODO: this is a potential security risk (see http://trac.symfony-project.org/ticket/9523)

$error = $error->getMessage();

}

// last username entered by the user

$lastUsername = (null === $session) ? '' : $session->get(SecurityContext::LAST_USERNAME);

$csrfToken = $this->container->has('form.csrf_provider')

? $this->container->get('form.csrf_provider')->generateCsrfToken('authenticate')

: null;

return $this->renderLogin(array(

'last_username' => $lastUsername,

'error' => $error,

'csrf_token' => $csrfToken,

));

}

/**

* Renders the login template with the given parameters. Overwrite this function in

* an extended controller to provide additional data for the login template.

* @param array $data

* @return \Symfony\Component\HttpFoundation\Response

protected function renderLogin(array $data)

{

$template = sprintf('FOSUserBundle:Security:login.html.%s', $this->container->getParameter('fos_user.template.engine'));

return $this->container->get('templating')->renderResponse($template, $data);

}

public function checkAction()

{

throw new \RuntimeException('You must configure the check path to be handled by the firewall using form_login in your security firewall configuration.');

}

public function logoutAction()

{

throw new \RuntimeException('You must activate the logout in your security firewall configuration.');

}

FOSUserBundle/Controller/SecurityController.php at master · torchello/FOSUserBundle · GitHub

Expand file tree

Breadcrumbs

SecurityController.php

Latest commit

History

Breadcrumbs

SecurityController.php

File metadata and controls