diogo/symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Security] fixed sub-requests creation (closes #1212)

Browse Source
This commit is contained in:
Fabien Potencier 2011-06-08 10:36:14 +02:00
parent 9118fcee14
commit 188e74273a
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/Symfony/Component/Security/Http/EntryPoint/FormAuthenticationEntryPoint.php
View File

@ -50,7 +50,9 @@ class FormAuthenticationEntryPoint implements AuthenticationEntryPointInterface
{
$path = str_replace('{_locale}', $request->getSession()->getLocale(), $this->loginPath);
if ($this->useForward) {
return $this->httpKernel->handle(Request::create($path), HttpKernelInterface::SUB_REQUEST);
$subRequest = Request::create($path, 'get', array(), $request->cookies->all(), array(), $request->server->all());
return $this->httpKernel->handle($subRequest, HttpKernelInterface::SUB_REQUEST);
}
return new RedirectResponse(0 !== strpos($path, 'http') ? $request->getUriForPath($path) : $path, 302);

2
src/Symfony/Component/Security/Http/Firewall/AbstractAuthenticationListener.php
View File

@ -203,7 +203,7 @@ abstract class AbstractAuthenticationListener implements ListenerInterface
$this->logger->debug(sprintf('Forwarding to %s', $path));
}
$subRequest = Request::create($path);
$subRequest = Request::create($path, 'get', array(), $request->cookies->all(), array(), $request->server->all());
$subRequest->attributes->set(SecurityContextInterface::AUTHENTICATION_ERROR, $failed);
return $event->getKernel()->handle($subRequest, HttpKernelInterface::SUB_REQUEST);

2
src/Symfony/Component/Security/Http/Firewall/ExceptionListener.php
View File

@ -115,7 +115,7 @@ class ExceptionListener
return;
}
$subRequest = Request::create($this->errorPage);
$subRequest = Request::create($this->errorPage, 'get', array(), $request->cookies->all(), array(), $request->server->all());
$subRequest->attributes->set(SecurityContextInterface::ACCESS_DENIED_ERROR, $exception);
$response = $event->getKernel()->handle($subRequest, HttpKernelInterface::SUB_REQUEST, true);