Log in user, without form submit (Symfony 3)

Question

I have a User entity, which implements UserInterface, \Serializable, EquatableInterface

It is set in the security settings:

security:

    encoders:
        AppBundle\Entity\User:
            algorithm: sha512

    providers:
        our_db_provider:
            entity:
                class: AppBundle:User
                property: email

    firewalls:
        main:
            anonymous: ~
            provider: our_db_provider
            form_login:
                login_path: login
                check_path: login

    access_control:
        - { path: ^/ , roles: IS_AUTHENTICATED_ANONYMOUSLY}
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/registration, roles: IS_AUTHENTICATED_ANONYMOUSLY }
        #...

I would like to select a user from the database and log in the current visitor, as the selected user.

$user = $em->getRepository('App\Entity\User')->find($user_id);

I have no idea, how to manage it. I am not using FOSUserBundle. I've searched for the solution, but I can't found anything, just the AuthenticationUtils, which only works with form submits.

Possible duplicate of How to programmatically login/authenticate a user? — Pieter van den Ham
– Pieter van den Ham, Commented Jan 5, 2017 at 23:28
You might be asking how to switch to a user: symfony.com/doc/current/security/impersonating_user.html — Cerad
– Cerad, Commented Jan 6, 2017 at 13:28

Dmitry Grachikov · Accepted Answer · 2017-01-06 09:42:22Z

1

In \Symfony\Component\Security\Http\Firewall\UsernamePasswordFormAuthenticationListener you can find lines that shows how to make authorization manually without performing a form submit:

$request->getSession()->set(Security::LAST_USERNAME, $username);

return $this->authenticationManager->authenticate(new UsernamePasswordToken($username, $password, $this->providerKey));

$this->providerKey can be taken from security.yml as a key from firewalls section.

If firewalls section looks like

    firewalls:
      secured_area:
        pattern:    ^/
        form_login:
          check_path: login_check
          login_path: login
        logout:
          path:   /logout

then providerKey = secured_area.

authenticationMananger can be taken from security.authentication.manager service.

Hope it will work!

answered Jan 6, 2017 at 9:42

Dmitry Grachikov

3163 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Log in user, without form submit (Symfony 3)

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related