我想从控制器内部检查是否是安全页面。 怎么做?
我的用例如下:
感谢您的帮助!
斯坦
答案 0 :(得分:14)
当Symfony2处理请求时,它与url模式匹配app/config/security.yml
中定义的每个防火墙。当url模式与防火墙模式匹配时,Symfony2会创建一些侦听器对象并调用这些对象的handle
方法。如果任何侦听器返回Response
对象,则循环中断,Symfony2输出响应。身份验证部分在身份验证侦听器中完成。它们是从匹配的防火墙中定义的配置创建的,例如form_login
,http_basic
等。如果用户未经过身份验证,则经过身份验证的侦听器会创建一个RedirectResponse
对象,以将用户重定向到登录页面。对于您的情况,您可以通过创建自定义身份验证侦听器作弊并将其添加到您的安全页面防火墙中。示例实现如下:
创建一个Token
类
namespace Your\Namespace;
use Symfony\Component\Security\Core\Authentication\Token\AbstractToken;
class MyToken extends AbstractToken
{
public function __construct(array $roles = array())
{
parent::__construct($roles);
}
public function getCredentials()
{
return '';
}
}
创建一个实现AuthenticationProviderInterface
的类。对于form_login
侦听器,它使用给定的UserProvider
进行身份验证。在这种情况下,它什么都不做。
namespace Your\Namespace;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authentication\Provider\AuthenticationProviderInterface;
use Acme\BaseBundle\Firewall\MyToken;
class MyAuthProvider implements AuthenticationProviderInterface
{
public function authenticate(TokenInterface $token)
{
if (!$this->supports($token)) {
return null;
}
throw new \Exception('you should not get here');
}
public function supports(TokenInterface $token)
{
return $token instanceof MyToken;
}
创建入口点类。听众将从此课程中创建RedirectResponse
。
namespace Your\Namespace;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
use Symfony\Component\Security\Http\HttpUtils;
class MyAuthenticationEntryPoint implements AuthenticationEntryPointInterface
{
private $httpUtils;
private $redirectPath;
public function __construct(HttpUtils $httpUtils, $redirectPath)
{
$this->httpUtils = $httpUtils;
$this->redirectPath = $redirectPath;
}
/**
* {@inheritdoc}
*/
public function start(Request $request, AuthenticationException $authException = null)
{
//redirect action goes here
return $this->httpUtils->createRedirectResponse($request, $this->redirectPath);
}
创建一个监听器类。在这里,您将实现重定向逻辑。
namespace Your\Namespace;
use Symfony\Component\Security\Http\Firewall\ListenerInterface;
use Symfony\Component\HttpKernel\Event\GetResponseEvent;
use Symfony\Component\Security\Core\SecurityContextInterface;
use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
class MyAuthenticationListener implements ListenerInterface
{
private $securityContext;
private $authenticationEntryPoint;
public function __construct(SecurityContextInterface $securityContext, AuthenticationEntryPointInterface $authenticationEntryPoint)
{
$this->securityContext = $securityContext;
$this->authenticationEntryPoint = $authenticationEntryPoint;
}
public function handle(GetResponseEvent $event)
{
$token = $this->securityContext->getToken();
$request = $event->getRequest();
if($token === null){
return;
}
//add your logic
$redirect = // boolean value based on your logic
if($token->isAuthenticated() && $redirect){
$response = $this->authenticationEntryPoint->start($request);
$event->setResponse($response);
return;
}
}
}
创建服务。
<?xml version="1.0" ?>
<container xmlns="http://symfony.com/schema/dic/services"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://symfony.com/schema/dic/services http://symfony.com/schema/dic/services/services-1.0.xsd">
<services>
<service id="my_firewall.security.authentication.listener"
class="Your\Namespace\MyAuthenticationListener"
parent="security.authentication.listener.abstract"
abstract="true">
<argument type="service" id="security.context" />
<argument /> <!-- Entry Point -->
</service>
<service id="my_firewall.entry_point" class="Your\Namespace\MyAuthenticationEntryPoint" public="false" ></service>
<service id="my_firewall.auth_provider" class="Your\Namespace\MyAuthProvider" public="false"></service>
</services>
</container>
注册听众。在捆绑Security/Factory
文件夹中创建名为DependencyInjection
的文件夹。然后创建工厂类。
namespace Your\Bundle\DependencyInjection\Security\Factory;
use Symfony\Component\DependencyInjection\ContainerBuilder;
use Symfony\Component\DependencyInjection\Reference;
use Symfony\Component\DependencyInjection\DefinitionDecorator;
use Symfony\Component\DependencyInjection\Definition;
use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\SecurityFactoryInterface;
use Symfony\Component\Config\Definition\Builder\NodeDefinition;
class MyFirewallFactory implements SecurityFactoryInterface
{
public function create(ContainerBuilder $container, $id, $config, $userProvider, $defaultEntryPoint)
{
$provider = 'my_firewall.auth_provider.'.$id;
$container->setDefinition($provider, new DefinitionDecorator('my_firewall.auth_provider'));
// entry point
$entryPointId = $this->createEntryPoint($container, $id, $config, $defaultEntryPoint);
// listener
$listenerId = 'my_firewall.security.authentication.listener'.$id;
$listener = $container->setDefinition($listenerId, new DefinitionDecorator('my_firewall.security.authentication.listener'));
$listener->replaceArgument(1, new Reference($entryPointId));
return array($provider, $listenerId, $entryPointId);
}
public function getPosition()
{
return 'pre_auth';
}
public function getKey()
{
return 'my_firewall'; //the listener name
}
protected function getListenerId()
{
return 'my_firewall.security.authentication.listener';
}
public function addConfiguration(NodeDefinition $node)
{
$node
->children()
->scalarNode('redirect_path')->end()
->end()
;
}
protected function createEntryPoint($container, $id, $config, $defaultEntryPointId)
{
$entryPointId = 'my_firewall.entry_point'.$id;
$container
->setDefinition($entryPointId, new DefinitionDecorator('my_firewall.entry_point'))
->addArgument(new Reference('security.http_utils'))
->addArgument($config['redirect_path'])
;
return $entryPointId;
}
}
然后在您的NamespaceBundle.php
包文件夹中添加以下代码。
public function build(ContainerBuilder $builder){
parent::build($builder);
$extension = $builder->getExtension('security');
$extension->addSecurityListenerFactory(new Security\Factory\MyFirewallFactory());
}
创建身份验证侦听器,phew :)。现在在你的app/config/security.yml
做了以下。
api_area:
pattern: ^/secured/
provider: fos_userbundle
form_login:
check_path: /login_check
login_path: /login
csrf_provider: form.csrf_provider
my_firewall:
redirect_path: /beta
logout: true
anonymous: true
答案 1 :(得分:0)
我不知道这是不是正确的方法 但您可以尝试以下
/vendor/symfony/src/Symfony/Component/HttpKernel/HttpKernel.php有一个方法 handleRaw ,可将请求转换为响应。请求对象可以从那里访问。您可以检查客户端是否已请求访问受保护的页面。如果是这样,您可以手动设置控制器,如
$request->attributes->set('_controller','your\Bundle\SecureBundle\Controller\SecureController::secureAction');
另一种解决方案是在用户尝试访问受保护的页面并在控制器内检查相同内容时设置会话
同样,这可能不是正确的方法,但它是一种可能的解决方法