3 回答

• 56

  经过相当多的研究，我发现了正确的方法 . 您需要使用Entry Point服务并在防火墙配置中定义它 .

  此方法 will not mess ，您的防火墙配置中指定了default page设置，用于登录 .

  ---

  守则

  security.yml:

  firewalls:
      main:
          entry_point: entry_point.user_login #or whatever you name your service
          pattern: ^/
          form_login:
          # ...
  

  src/Acme/UserBundle/config/services.yml

  services:
      entry_point.user_login:
          class: Acme\UserBundle\Service\LoginEntryPoint
          arguments: [ @router ] #I am going to use this for URL generation since I will be redirecting in my service
  

  src/Acme/UserBundle/Service/LoginEntryPoint.php:

  namespace Acme\UserBundle\Service;
  
  use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface,
      Symfony\Component\Security\Core\Exception\AuthenticationException,
      Symfony\Component\HttpFoundation\Request,
      Symfony\Component\HttpFoundation\RedirectResponse;
  
  /**
   * When the user is not authenticated at all (i.e. when the security context has no token yet), 
   * the firewall's entry point will be called to start() the authentication process. 
   */
  class LoginEntryPoint implements AuthenticationEntryPointInterface
  {
      protected $router;
  
      public function __construct($router)
      {
          $this->router = $router;
      }
  
      /*
       * This method receives the current Request object and the exception by which the exception 
       * listener was triggered. 
       * 
       * The method should return a Response object
       */
      public function start(Request $request, AuthenticationException $authException = null)
      {
          $session = $request->getSession();
  
          // I am choosing to set a FlashBag message with my own custom message.
          // Alternatively, you could use AuthenticationException's generic message 
          // by calling $authException->getMessage()
          $session->getFlashBag()->add('warning', 'You must be logged in to access that page');
  
          return new RedirectResponse($this->router->generate('login'));
      }
  }
  

  login.html.twig:

  {# bootstrap ready for your convenience ;] #}
  {% if app.session.flashbag.has('warning') %}
      {% for flashMessage in app.session.flashbag.get('warning') %}
          <div class="alert alert-warning">
              <button type="button" class="close" data-dismiss="alert">&times;</button>
              {{ flashMessage }}
          </div>
      {% endfor %}
  {% endif %}
  

  资源：

  • AuthenticationEntryPointInterface API

  • Entry Points Documentation

  • Security Configuration Reference

  • How to Customize your Form Login

  • Why access_denied_handle doesn't work - 感谢cheesemacfly for tip

  回复于 2024-04-27T21:36:45+08:00
• 1

  我认为kernel.exception监听器和设置flash消息可以做到这一点 . 未经测试的例子：

  use Symfony\Component\HttpKernel\Event\GetResponseForExceptionEvent;
  use Symfony\Component\HttpFoundation\Response;
  use Symfony\Component\HttpFoundation\Session\SessionInterface;
  use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  
  class My403ExceptionListener
  {
      protected $session;
  
      public function __construct(SessionInterface $session)
      {
          $this->session = $session;
      }
  
      public function onKernelException(GetResponseForExceptionEvent $event)
      {
          $exception = $event->getException();
          if ($exception instanceof AccessDeniedHttpException) {
              $this->session->getFlashBag()->set('warning', 'You must login to access that page.');
          }
      }
  }
  

  唐't really know if it works or if it'是对的 . 您可以将其注册为 kernel.event_listener . 或者，您可能更好地使用专用服务并将其设置为firewall config中 access_denied_handler 的参数 . 我认为有很多可能的方法 .

  回复于 2024-04-27T21:36:45+08:00
• 0

  你能不能只有两条登录路线？

  例如，在安全配置集中

  form_login:
      login_path: /login_message
  

  在您的登录控制器中

  /**
   * @Template()
   * @Route("/notauthorized", name="login_message")
   */
   public function loginMessageAction()
   {
      return [];
   }
  

  然后在你的loginMessage.html.twg中

  <a href="{{ path('login') }}">You must login to access this page.</a>
  

  回复于 2024-04-27T21:36:45+08:00