Indeed excluding /login.* from any restrictions got rid of the redirect loop, thanks.
Now when I try to login the form gets submitted to /login_check which results in an "Unable to find the controller." message. Given that no controller is defined for that path that is to be expected I guess but the example in the documentation doesn't provide a controller either and it says that the submission is handled automatically and I only have to implement the display of the form (which works). So I'm not sure which controller I'm supposed to route /login_check to. Regards, Dennis On Nov 2, 3:43 pm, Johannes <[email protected]> wrote: > You need to make sure to remove access restrictions for the login > page. > > If you are following a whitelist policy, you can do so by also > enabling the anonymous listener and then requiring the > "IS_AUTHENTICATED_ANONYMOUSLY" role for the login page. > > Johannes > > On Nov 2, 3:12 pm, Dennis Jacobfeuerborn <[email protected]> > wrote: > > > I'm trying to get a form-login going with the new security framework > > but I'm running into trouble. > > I've followed the instructions > > athttp://docs.symfony-reloaded.org/master/guides/security/authenticatio... > > and used the http-basic mechanism which works fine so far. Then I > > replaced the http-basic:true bit with form-login:true in the > > configuration, put the login form and controller code in the right > > place and added the following routes (adapted to yaml from the xml in > > the documentation): > > > _security_login: > > pattern: /login > > defaults: { _controller: DamBundle:System:login } > > > _security_check: > > pattern: /login_check > > > The result is an endless redirect loop. Looking at the rewrite log I > > can see that when I request / then I get redirected to /login which is > > expected since I'm not authenticated. However then /login redirects > > again to /login which causes the loop. Is there anything missing from > > the above documentation that is required to get the form login > > working? > > > Regards, > > Dennis -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/symfony-devs?hl=en
