symfony - 如何以编程方式对用户进行身份验证

Question

我有一个控制器，它应该通过一个简单的表单添加用户，但我无法让用户进行手动身份验证。

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken    

public function addAction($user)
    {
           $token =new UsernamePasswordToken(
                    $user->getUsername(),
                    $user->getPassword(),
                    'secured_area',
                   $user->getRoles()
                    );

           $this->get('security.context')->setToken($token);
           // as suggested in some other answers

           $request->getSession()->set('_security_secured_area', serialize($token));
           // as suggested in http://techblog.zabuchy.net/2012/manually-authenticate-symfony-2-user/

            return $this->redirect($this->generateUrl('acme_project_secure_show' )
                    );
        }
    }

重定向到安全路由有效，但是由于身份验证设置不$this->getUser()正确，该 方法返回 null ...$user= $this->get('security.context')->getToken();$user= $this->get('security.context')->getToken()->getUser();$this->getUser()

Answer 1

问题已解决 - 缺少两点：1) 有必要InteractiveLoginEvent为链接发送 -thanks mpm 2) 此控制器的路由不在secured_area防火墙下 - 谢谢 Florian ;)

Answer 2

你可以试试这个

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken

$token = new UsernamePasswordToken($user, $user->getPassword(), "firewallname", $user->getRoles());

Answer 3

正如@user19340357 所说，您可以手动实例化令牌。

他忘记说的是你应该在安全上下文中设置它：

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken

$token = new UsernamePasswordToken($user, $user->getPassword(), "firewallname", $user->getRoles());
$securityContext = $this->container->get('security.context'); // do it your way
$securityContext->setToken($token);