如何使 Symfony4 中的匿名用户只能访问 /login 路由？

Question

My access_controll looks like:

- { path: ^/login, role: IS_AUTHENTICATED_ANONYMOUSLY}
- { path: ^/, roles: ROLE_USER}

I need to give an access to route /login only to anonymously authenticated users.

Answer 1

好的，我找到了解决方案：

- { path: ^/login, allow_if: 'is_anonymous()'}

Answer 2

Okay, there's a better variant to do this even with redirect. Firstable, you need to edit security.yaml with this:

access_control:
        - { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY}
        - { path: ^/, roles: ROLE_USER}

And then just add this to your SecurityController::login() method:

if ($this->isGranted('ROLE_USER')) {
        return new RedirectResponse(
            $this->generateUrl('index')
        );
    }