Symfony2登录验证

Question

I know that it is a common thing but I can't find what mistake I'm doing and I'm getting crazy.

I can't login by a login form, when I submit the form, it returns to itself without error and not authenticated.

Thanks in advance!

Here is my security.yml

security:
     encoders:
         Symfony\Component\Security\Core\User\User: plaintext
         #Cityincheck\AppBundle\Entity\User:
             #algorithm: bcrypt
             #cost: 12

role_hierarchy:
    ROLE_ADMIN:       ROLE_USER

providers:
    in_memory:
        memory:
            users:
                ryan:
                    password: ryanpass
                    roles: 'ROLE_USER'
                admin:
                    password: kitten
                    roles: 'ROLE_ADMIN'

firewalls:
    dev:
        pattern:  ^/(_(profiler|wdt)|css|images|js)/
        security: false

    login_firewall:
        pattern:   ^/login$
        anonymous: ~
    admin_area:
        pattern:    ^/*
        form_login:
            check_path: /login_check
            login_path: /login
            provider: in_memory
            default_target_path: /admin
        logout:
            path:   admin_logout
            target: admin_login
        #anonymous: ~
        #http_basic:
        #    realm: "Secured Demo Area"

access_control:
    - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin, roles: ROLE_ADMIN }

My routing.yml

admin_login:
    path: /login
    defaults: { _controller: AppBundle:AccessControl:login }

admin_login_check:
    path: /login_check

And my controller:

class AccessControlController extends Controller
{

public function loginAction(Request $request)
{
    $session = $request->getSession();

    // get the login error if there is one
    if ($request->attributes->has(SecurityContextInterface::AUTHENTICATION_ERROR)) {
        $error = $request->attributes->get(
            SecurityContextInterface::AUTHENTICATION_ERROR
        );
    } elseif (null !== $session && $session->has(SecurityContextInterface::AUTHENTICATION_ERROR)) {
        $error = $session->get(SecurityContextInterface::AUTHENTICATION_ERROR);
        $session->remove(SecurityContextInterface::AUTHENTICATION_ERROR);
    } else {
        $error = null;
    }

    // last username entered by the user
    $lastUsername = (null === $session) ? '' : $session->get(SecurityContextInterface::LAST_USERNAME);

    return $this->render(
        'AppBundle::login.html.twig',
        array(
            // last username entered by the user
            'last_username' => $lastUsername,
            'error'         => $error,
        )
    );
}
} 

Answer 1

The problem is in your security.yml. When somebody send form, browser sent HTTP request to /login_check to check login and password. But app don't allow to do it as user are not authenticated. You must add '/login_check' to access_control

access_control:
    - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/login_check, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin, roles: ROLE_ADMIN }

Or that

access_control:
    - { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin, roles: ROLE_ADMIN }