FOSUserBundle + HWIOAuth 安全配置失败

Question

我正在尝试让 FOSUserBundle 和 HWIOAuth 一起工作以处理两种类型用户的身份验证：代表和实习生。代表将开始使用 HWIOAuth，并将使用 Salesforce 和内部 FOSUserBundle。

我正在尝试设置所有内容，但我遇到了问题，因为当我尝试访问 /login-salesforce 或 /admin 路由时，Symfony 会抛出此错误。

BaseNode.php 第 313 行中的 InvalidConfigurationException：无效 路径“security.firewalls.admin_area”的配置：check_path 登录方法“form_login”的“/login_check”与 防火墙模式“^/admin”。

这是security.yml文件的内容：

security:
    encoders:
        FOS\UserBundle\Model\UserInterface: sha512

    role_hierarchy:
        ROLE_REPRESENTATIVE:        [ROLE_USER]
        ROLE_ADMIN:                 [ROLE_REPRESENTATIVE, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        fos_userbundle:
            id: fos_user.user_provider.username_email

    firewalls:
        dev:
            pattern:  ^/(_(profiler|wdt)|css|images|js)/
            security: false

        #this is the secured area accessed through web browser and only internals are allowed to login
        admin_area:
            pattern:    ^/admin
            anonymous:    ~
            form_login:
                provider: fos_userbundle
                csrf_provider: form.csrf_provider
                login_path: /login
                check_path: /login_check
                post_only: true
                always_use_default_target_path: true
                target_path_parameter: _target_path
                use_referer: false
                failure_path: null
                failure_forward: false
            logout:
                path:   fos_user_security_logout
                target: /

        #this is the public area accessed by/from iOs app and only users registered at Salesforce as rep can login
        rep_area:
            methods: [GET, POST]
            pattern: ^/
            anonymous: true
            logout: true
            logout:
                path:   /logout
                target: /
            oauth:
                resource_owners:
                    salesforce: "/login/check-salesforce"
                login_path: /login
                failure_path: /login
                oauth_user_provider:
                    service: pdi_salesforce.oauth_user_provider

    access_control:
        - { path: ^/reptool, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin, roles: ROLE_SUPER_ADMIN }

来自HWIOAuth 方面，我认为我已经完成了所有设置（如果有人需要，可以分享）。这是routing.yml文件的内容：

#HWIOAuthBundle
hwi_oauth_redirect:
    resource: "@HWIOAuthBundle/Resources/config/routing/redirect.xml"
    prefix:   /connect

hwi_oauth_login:
    resource: "@HWIOAuthBundle/Resources/config/routing/login.xml"
    prefix:   /login

salesforce_login:
    pattern: /login/check-salesforce

#PDOne
pd_one:
    resource: "@PDOneBundle/Controller/"
    type:     annotation
    prefix:   /

template:
    resource: "@TemplateBundle/Controller/"
    type:     annotation
    prefix:   /

#FOSUserBundle
fos_user:
    resource: "@FOSUserBundle/Resources/config/routing/all.xml"

#SonataAdmin
admin:
    resource: '@SonataAdminBundle/Resources/config/routing/sonata_admin.xml'
    prefix: /admin

_sonata_admin:
    resource: .
    type: sonata_admin
    prefix: /admin

我还缺少什么？这里有没有人让这两个人一起工作并可以分享他们的工作来完成它？

Answer 1

呵呵，问题来了

admin_area:
        pattern:    ^/admin
        anonymous:    ~
        form_login:
            provider: fos_userbundle
            csrf_provider: form.csrf_provider
            login_path: /admin/login
            check_path: /admin/login_check
            post_only: true
            always_use_default_target_path: true
            target_path_parameter: _target_path
            use_referer: false
            failure_path: null
            failure_forward: false
        logout:
            path:   fos_user_security_logout
            target: /

login_path 和check_path 需要在前面有/admin。