Symfony 4 使用用户实体的基本 http 身份验证

Question

首先，我尝试了使用 in_memory 提供程序的简单方法，如本文档中所示：https://symfony.com/doc/current/security.html，它对我很有效，然后我继续本教程：https://symfony.com/doc/current/security/entity_provider.html，最终陷入浏览器 http 的无限循环基本用户数据请求。

这是我的代码，也许有人能找到丢失的小分号 :D

网址：https://gitlab.com/AceVik/ajoli

必需的文件。 安全性.yml

security:
# https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
providers:
    our_db_provider:
         entity:
            class: App\Entity\User
    #        property: username
    #in_memory:
    #    memory:
    #        users:
    #            admin:
    #                password: admin
    #                roles: 'ROLE_ADMIN'
firewalls:
    #secured_area:
    #    logout:
    #        path: /logout
    #        target: /
    dev:
        pattern: ^/(_(profiler|wdt)|css|images|js)/
        security: false
    main:
    #    pattern:    ^/
        http_basic: ~
        provider: our_db_provider
   #     provider: in_memory
encoders:
    App\Entity\User: plaintext
    #    algorithm: bcrypt
    #    cost: 12
    #Symfony\Component\Security\Core\User\User: plaintext

role_hierarchy:
    ROLE_ADMIN:       ROLE_USER
    ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

# Easy way to control access for large sections of your site
# Note: Only the *first* access control that matches will be used
access_control:
     - { path: ^/admin, roles: ROLE_ADMIN }
     - { path: ^/profile, roles: ROLE_USER }

用户.php

<?php

declare(strict_types=1);

namespace App\Entity;

use Doctrine\ORM\Mapping as ORM;
use Symfony\Component\Security\Core\User\UserInterface;

/**
 * @ORM\Table(name="users")
 * @ORM\Entity(repositoryClass="App\Repository\UserRepository")
 */
class User implements UserInterface, \Serializable
{
    /**
     * @ORM\Column(type="integer")
     * @ORM\Id
     * @ORM\GeneratedValue(strategy="AUTO")
     */
    private $id;

    /**
     * @ORM\Column(type="string", length=25, unique=true)
     */
    private $username;

    /**
     * @ORM\Column(type="string", length=64)
     */
    private $password;

    /**
     * @ORM\Column(type="string", length=254, unique=true)
     */
    private $email;

    /**
     * @ORM\Column(name="is_active", type="boolean")
     */
    private $isActive;

    public function __construct()
    {
        $this->isActive = true;
        // may not be needed, see section on salt below
        // $this->salt = md5(uniqid('', true));
    }

    public function getUsername()
    {
        return $this->username;
    }

    public function setUsername($username) {
        $this->username = $username;
        $this->email = $username . '@example.com';
    }

    public function setPassword($password) {
        $this->password = $password;
    }

    public function getSalt()
    {
        // you *may* need a real salt depending on your encoder
        // see section on salt below
        return null;
    }

    public function getPassword()
    {
        return $this->password;
    }

    public function getRoles()
    {
        return array('ROLE_USER');
    }

    public function eraseCredentials()
    {
    }

    /** @see \Serializable::serialize() */
    public function serialize()
    {
        return serialize(array(
            $this->id,
            $this->username,
            $this->password,
            // see section on salt below
            // $this->salt,
        ));
    }

    /** @see \Serializable::unserialize() */
    public function unserialize($serialized)
    {
        list (
            $this->id,
            $this->username,
            $this->password,
            // see section on salt below
            // $this->salt
            ) = unserialize($serialized, ['allowed_classes' => false]);
    }
}

UserRepository.php

<?php

namespace App\Repository;

use App\Entity\User;
use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
use Doctrine\Common\Persistence\ManagerRegistry;
use Symfony\Bridge\Doctrine\Security\User\UserLoaderInterface;

class UserRepository extends ServiceEntityRepository implements UserLoaderInterface
{
    public function __construct(ManagerRegistry $registry)
    {
        parent::__construct($registry, User::class);
    }

    public function loadUserByUsername($username)
    {
        return $this->createQueryBuilder('u')
            ->where('u.username = :username')
            ->setParameter('username', $username)
            ->getQuery()
            ->getOneOrNullResult();
    }
}

Answer 1

维克托，

您的图片似乎有问题。我加载了自己的 docker 映像，它对我有用。

要调试，您可以打开 BasicAuthenticationListener（在供应商目录中搜索）。并在 } catch (AuthenticationException $e) { 上设置断点 或者在其下添加 exit(var_dump($e)); 来检查抛出了什么异常。

Answer 2

找到解决方案。

我刚刚将 Symfony 从 4.0.9 更新到 4.0.11，它解决了这个问题。看来，这是一个 Symfony 错误：https://symfony.com/blog/symfony-4-0-11-released

现在我在注销时遇到问题：D 我尝试自己修复它，但如果有人看到错误，请告诉我。我的 gitlab 存储库仍然是公开的。