使用会话变量进行编程验证

Question

I'm trying to get authentication working in Symfony2.

My users use a login form somewhere else on the site that is not controlled by symfony2.

what I would like is Symfony to detect the users are already logged in and authenticated by reading a session variable and comparing against the DB.

I don't want to reimplement a login form on the symfony part of the website.

In symfony 1.x, for example, I would simply overload the BasicSecurityUser class and use the setAuthenticated method, but it seems this is not possible in Symfony2.

Is there any simple way of achieving the same result?

Thank you!

Answer 1

Once you know the user name of the authenticated user, you can log them in with:

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;

class MyController {

// Takes either userName or an actual user object
protected function setUser($userName)
{
    if (is_object($userName)) $user = $userName;
    else
    {
        $userProvider = $this->get('zayso_core.user.provider');
        // Need try/catch here
        $user = $userProvider->loadUserByUsername($userName);
    }
    $providerKey = 'secured_area';
    $providerKey = $this->container->getParameter('zayso_area.provider.key'); // secured_area

    $token = new UsernamePasswordToken($user, null, $providerKey, $user->getRoles());
    $this->get('security.context')->setToken($token);
    return $user;
}