symfony2如何在登录后重定向到请求的页面

Question

假设我的路由/booking/(.*)受security.yml中的防火墙配置保护,并且它需要" ROLE_USER ",当用户尝试访问前面带有 " / booking / "的任何路由时,app会将用户重定向到登录验证页面.

所以我的问题是,在用户提供他的凭据并获得身份验证后,Symfony 2如何能够将用户重定向回用户请求的页面/路由,或者Symfony 2存储该路由的位置是将其存储在某个会话中还是别的地方.

我们可以访问它吗？

Answer 1

这是可能的,您可以在会话中访问引用链接(如果use_referer设置为,则使用该链接true).

例如,如果您success_handler的form_login(在防火墙配置中)有一项服务,根据某些条件(通常是角色)重定向用户,但是如果设置了用户,则您希望将用户重定向到引荐来源链接,您可以像这样访问引荐来源链接:

$key = '_security.main.target_path'; #where "main" is your firewall name

//check if the referrer session key has been set 
if ($this->container->get('session')->has($key)) {
    //set the url based on the link they were trying to access before being authenticated
    $url = $this->container->get('session')->get($key);

    //remove the session key
    $this->container->get('session')->remove($key);
}
//if the referrer key was never set, redirect to a default route
else{
    $url = $this->router->generate('member_home');
}

return new RedirectResponse($url); 

使用标头获取引用者(即$request->headers->get('referer'))在这种情况下将不起作用,因为它将始终返回登录链接.

感谢Roman Marintsenko和Ryan Weaver的博客

Answer 2

Carrie Kendall的解决方案有效,谢谢!

这是Symfony中的完整实现:

services.yml:

login_handler:
    class: Project\BaseBundle\Service\loginHandler
    arguments: ['@router', '@doctrine.orm.entity_manager', '@service_container']

在Project\BaseBundle\Service\loginHandler中:

namespace Project\BaseBundle\Service;

use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Http\Authentication\AuthenticationSuccessHandlerInterface;
use Symfony\Component\Routing\RouterInterface;
use Doctrine\ORM\EntityManager;


class loginHandler implements AuthenticationSuccessHandlerInterface {

    private $router;
    private $container;
    private static $key;

    public function __construct(RouterInterface $router, EntityManager $em, $container) {

        self::$key = '_security.secured_area.target_path';

        $this->router = $router;
        $this->em = $em;
        $this->session = $container->get('session');

    }

    public function onAuthenticationSuccess( Request $request, TokenInterface $token ) {

        $user_entity = $token->getUser();

        if( !$user_entity->getChangePassword() ) {

            $route = $this->router->generate('BaseBundle_home_page');

        } else {

            $this->session->getFlashBag()->add('error', 'Your password must be changed now');

            $route = $this->router->generate('BaseBundle_account_page');

        }

        //check if the referer session key has been set
        if ($this->session->has( self::$key )) {

            //set the url based on the link they were trying to access before being authenticated
            $route = $this->session->get( self::$key );

            //remove the session key
            $this->session->remove( self::$key );
            //if the referer key was never set, redirect to a default route

        } else{

            $url = $this->generateUrl('BaseBundle_home_page');

            return new RedirectResponse($route);

        }

        return new RedirectResponse($route);

    }
}

Answer 3

我也有这个问题。我使用了 security.yml 并在使用的注册操作中：

$redirectUrl = $request->getSession()->get('_security.account.target_path');

请享用。