Question

我跟着official documentation使用symfony 2标准发行版提供的安全性来验证我的用户，通过Doctrine2将它们保存在数据库中，看起来配置的一切都还可以，但我总是得到同样的错误：Bad Credentials。

我使用DoctrineFixturesBundle加载一些用户和角色，似乎完成加载确定。所以，我认为这个问题在认证过程中的某个地方，对我来说是透明的...我不知道如何调试这个并且会感谢任何帮助......

谢谢！如果您需要任何其他代码段，请告诉我，我将编辑问题。我没有在这里粘贴代码，以使问题更具可读性......

编辑2 ：正如@Dieter所建议的那样，我检查了日志，似乎没有数据传递给查询，这非常奇怪，因为我遵循他们提到的每个约定在the cookbook ...这里也是我的登录表单的定义。抱歉，这个问题很长！任何帮助将不胜感激！

LoginType.php的片段：

  public function buildForm(FormBuilder $builder, array $options) {
    $builder->add('_username', 'text', array(
        'label' => 'Email ',
        'required' => true,
    ));
    $builder->add('_password', 'password', array(
        'label' => 'Password ',
        'required' => true,
    ));
    $builder->add('_remember_me', 'checkbox', array(
        'label' => 'Remember me ',
        'required' => false,
    ));
  }

app / logs / dev.log输出：

[2012-04-17 03:43:01] event.DEBUG: Notified event "kernel.request" to listener
                      "Symfony\Component\Security\Http\Firewall::onKernelRequest".
                      [] []
[2012-04-17 03:43:01] doctrine.DEBUG: SET NAMES UTF8 ([]) [] []
[2012-04-17 03:43:01] doctrine.DEBUG: SELECT t0.id AS id1, t0.username AS
                      username2, t0.salt AS salt3, t0.password AS password4,
                      t0.is_active AS is_active5, t0.mailer_id AS mailer_id6
                      FROM SfUser t0 WHERE t0.username = ? (["NONE_PROVIDED"])
                      [] []
[2012-04-17 03:43:01] security.INFO: Authentication request failed: Bad
                      credentials [] []
[2012-04-17 03:43:01] security.DEBUG: Redirecting to / [] []

修改：由于我的pastebin链接已过期，并且正如Peter Porfey所建议的那样，这是代码：

这是我的security.yml

security:
    encoders:
        ElCuadre\AccountBundle\Entity\User: sha512

    role_hierarchy:
        ROLE_ADMIN:       [ROLE_USER, ROLE_PROVIDER]
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_PROVIDER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        user_db:
            entity: { class: ElCuadre\AccountBundle\Entity\User, property: username}

    firewalls:
        dev:
            pattern:  ^/(_(profiler|wdt)|css|images|js)/
            security: false
        secured_area:
            pattern:  ^/
            anonymous: ~
            form_login:
                login_path: /
                check_path: /login_check
            logout:
                path:   /logout
                target: /
            remember_me:
              key:      %secret%
              lifetime: 3600
              path:     /
              domain:   ~ # Defaults to the current domain from $_SERVER

    access_control:
        - { path: ^/$, roles: IS_AUTHENTICATED_ANONYMOUSLY }

和我的控制员：

public function loginAction() {
    $request = $this->getRequest();
    $session = $request->getSession();

    // get the login error if there is one
    if ($request->attributes->has(SecurityContext::AUTHENTICATION_ERROR)) {
      $error = $request->attributes->get(SecurityContext::AUTHENTICATION_ERROR);
    } else {
      $error = $session->get(SecurityContext::AUTHENTICATION_ERROR);
      $session->remove(SecurityContext::AUTHENTICATION_ERROR);
    }

    $form = $this->createForm(new LoginType());
    return $this->render(
                    'ElCuadreAccountBundle:Auth:login.html.twig',
                     array(
                         'form'         => $form->createView(),
                         'last_username' => $session->get(
                                              SecurityContext::LAST_USERNAME),
                         'error'       => $error,
                         )
    );
}

以下是灯具文件的代码：

<?php

namespace ElCuadre\AccountBundle\DataFixtures\ORM;

use Doctrine\Common\Persistence\ObjectManager;
use Doctrine\Common\DataFixtures\FixtureInterface;
use Doctrine\Common\DataFixtures\AbstractFixture;
use ElCuadre\AccountBundle\Entity\User;
use ElCuadre\AccountBundle\Entity\Role;
use Symfony\Component\DependencyInjection\ContainerAwareInterface;
use Symfony\Component\DependencyInjection\ContainerInterface;

class LoadAccountData extends AbstractFixture implements FixtureInterface, ContainerAwareInterface {

  private $container;

  public function setContainer(ContainerInterface $container = null) {
    $this->container = $container;
  }

  private function loadRole($manager, $name, $roleName) {
    $role = new Role();
    $role->setName($name);
    $role->setRole($roleName);
    $manager->persist($role);
    $manager->flush();
    return $role;
  }

  private function loadUser($manager, $username, $password, $roles) {
    $user = new User();
    $user->setUsername($username);
    $encoder = $this->container->get('security.encoder_factory')->getEncoder($user);
    $user->setPassword($encoder->encodePassword($password, $user->getSalt()));
    foreach ($roles as $role) {
      $user->addRole($role);
    }
    $manager->persist($user);
    $manager->flush();
  }

  public function load(ObjectManager $manager) {
    // Roles:
    $roleUser = $this->loadRole($manager, 'user', 'ROLE_USER');
    $roleProvider = $this->loadRole($manager, 'provider', 'ROLE_PROVIDER');
    $roleAdmin = $this->loadRole($manager, 'admin', 'ROLE_ADMIN');
    $roleSuperAdmin = $this->loadRole($manager, 'superadmin', 'ROLE_SUPER_ADMIN');
    // Users:
    $this->loadUser($manager, 'user@elcuadre.com', 'userpass', $roleUser);
    $this->loadUser($manager, 'provider@elcuadre.com', 'providerpass', $roleProvider);
    $this->loadUser($manager, 'admin@elcuadre.com', 'adminpass', $roleAdmin);
    $this->loadUser($manager, 'superadmin@elcuadre.com', 'superadminpass', $roleSuperAdmin);
  }
}

Answer 1

如果我发生类似的错误，app / logs / dev.log或系统日志中会显示某种问题，例如/var/log/apache2/error.log。
你看到有什么东西突然冒出来了吗？

编辑：作为对您新信息的反应

您自己构建该表单是否有原因？如您引用的文档中所述，您可以只创建树枝模板并为字段指定名称“_username”和“_password”。那么魔法应该为你完成。

Symfony 2安全性始终返回Bad Credentials错误

1 个答案: