Le 18/01/2011 04:58, kertz a écrit :
I have the following security.config, which uses in-memory user
provider. The users are creates with password in plain-text, which I
came to know when I tried to debug InMemoryUserProvider->createUser()

The trouble is, whenver I try to access the protected page, it asks me
for login in an infinite loop without any authentication process.

I'm using the latest from fabpot/symfony master branch. Does anyone
has any idea what could be wrong?

security.config:
   encoders:
         Symfony/Component/Security/User/User: plaintext
   providers:
     main:
       users:
         foo: { password: foo, roles: ROLE_USER }
   firewalls:
     main:
       pattern:    /.*
       http-basic: true
       stateless:  true
   access_control:
     - { path: /.*, role: ROLE_USER }

You should use \ as it use a namespace. I don't see another reason in this config.

--
Christophe | Stof

--
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to