微信公众号搜"智元新知"关注
微信扫一扫可直接关注哦!

Symfony 4.4多个提供商的多防火墙安全性

如何解决Symfony 4.4多个提供商的多防火墙安全性

我有两个防火墙,分别用于用户和纪念品。我创建了两个链接两个不同实体的不同提供程序。我可以以用户身份登录,但从来没有作为采购员登录,我收到302 http错误

我不明白我需要添加什么

安全性: 编码器: 应用\实体\用户: 算法:bcrypt

    App\Entity\Compte:
        algorithm: bcrypt
# https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
providers:
    
    chain_provider:
        chain:
            providers: [user_provider,soumissionnaire_provider]

    in_memory: { memory: ~ }
    user_provider:
        entity:
            class: App\Entity\User
            property: username
    
    soumissionnaire_provider:
        entity:
            class: App\Entity\Compte
            property: username
role_hierarchy:
    # Un admin hérite des droits d'utilisateur et de souscommission
    ROLE_ADMIN:       ROLE_SOUSCOMMISSION
    # On garde ce rôle superadmin,il nous resservira par la suite
    #ROLE_SUPER_ADMIN: [ROLE_ADMIN,ROLE_ALLOWED_TO_SWITCH]

firewalls:
    dev:
        pattern: ^/(_(profiler|wdt)|css|images|js)/
        security: false
    soumission:
        pattern: ^/compte
        anonymous: true
        provider:
            soumissionnaire_provider
        form_login:
            login_path: authentificatin_security
            check_path: authentificatin_security
            default_target_path: home
        logout:
            path: deconnexion_security
            target: authentificatin_security
    main:
        pattern: ^/
        anonymous: true
        provider:
            user_provider
        form_login:
            login_path: security_login
            check_path: security_login
            default_target_path: accueil
        logout:
            path: security_logout
            target: security_login

        # activate different ways to authenticate

        # http_basic: true
        # https://symfony.com/doc/current/security.html#a-configuring-how-your-users-will-authenticate

        # form_login: true
        # https://symfony.com/doc/current/security/form_login_setup.html

# Easy way to control access for large sections of your site
# Note: Only the *first* access control that matches will be used
access_control:
    - { path: ^/admin,roles: ROLE_ADMIN }
    - { path: ^/analyse,roles: ROLE_SOUSCOMMISSION }
    - { path: ^/compte,roles: ROLE_SOUSMISSIONAIRE }

access_denied_url: /login

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。