This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
symfony/src/Symfony/Component/Security
Jeremy Mikola 49a8654cb8 [Security] Use LogoutException for invalid CSRF token in LogoutListener
On the advice of @schmittjoh, this commit adds a LogoutException class for use by LogoutListener if the CSRF token is invalid.

The handling in the Security component's ExceptionListener is modeled after AccessDeniedException, which gets wrapped in an AccessDeniedHttpException in the absence of handler service or error page (I didn't think it was appropriate to re-use those for LogoutException).
2012-02-14 19:03:52 -05:00
..
Acl allow unsetting parentAcl on MutableAclInterface 2012-01-30 14:16:44 +01:00
Core [Security] Use LogoutException for invalid CSRF token in LogoutListener 2012-02-14 19:03:52 -05:00
Http [Security] Use LogoutException for invalid CSRF token in LogoutListener 2012-02-14 19:03:52 -05:00
composer.json Revert "merged 2.0" 2012-01-08 20:43:02 +01:00
LICENSE added LICENSE files for the subtree repositories 2011-02-22 18:58:15 +01:00
README.md tweaked the README files 2011-12-18 14:22:28 +01:00

Security Component

Security provides an infrastructure for sophisticated authorization systems, which makes it possible to easily separate the actual authorization logic from so called user providers that hold the users credentials. It is inspired by the Java Spring framework.

Resources

Unit tests:

https://github.com/symfony/symfony/tree/master/tests/Symfony/Tests/Component/Security

Documentation:

http://symfony.com/doc/2.0/book/security.html