CODEWITHSUNDEEP
phpsymfony
Saze
Saze

Reputation: 289

Programmatic authenticatication using a session variable

I'm trying to get authentication working in Symfony2.

My users use a login form somewhere else on the site that is not controlled by symfony2.

what I would like is Symfony to detect the users are already logged in and authenticated by reading a session variable and comparing against the DB.

I don't want to reimplement a login form on the symfony part of the website.

In symfony 1.x, for example, I would simply overload the BasicSecurityUser class and use the setAuthenticated method, but it seems this is not possible in Symfony2.

Is there any simple way of achieving the same result?

Thank you!

Upvotes: 0

Views: 175

Answers (1)

Cerad
Cerad

Reputation: 48893

Once you know the user name of the authenticated user, you can log them in with:

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;

class MyController {

// Takes either userName or an actual user object
protected function setUser($userName)
{
    if (is_object($userName)) $user = $userName;
    else
    {
        $userProvider = $this->get('zayso_core.user.provider');
        // Need try/catch here
        $user = $userProvider->loadUserByUsername($userName);
    }
    $providerKey = 'secured_area';
    $providerKey = $this->container->getParameter('zayso_area.provider.key'); // secured_area

    $token = new UsernamePasswordToken($user, null, $providerKey, $user->getRoles());
    $this->get('security.context')->setToken($token);
    return $user;
}

Upvotes: 2

Related Questions