[SecurityBundle] Fix Security::login() on specific firewall

symfony · Feb 21, 2023 · 601bcc1 · 601bcc1
1 parent 86e3697
commit 601bcc1
Show file tree

Hide file tree

Showing 5 changed files with 20 additions and 3 deletions.
diff --git a/Resources/config/security.php b/Resources/config/security.php
@@ -83,7 +83,7 @@
                 service_locator([
                     'security.token_storage' => service('security.token_storage'),
                     'security.authorization_checker' => service('security.authorization_checker'),
-                    'security.user_authenticator' => service('security.user_authenticator')->ignoreOnInvalid(),
+                    'security.authenticator.managers_locator' => service('security.authenticator.managers_locator')->ignoreOnInvalid(),
                     'request_stack' => service('request_stack'),
                     'security.firewall.map' => service('security.firewall.map'),
                     'security.user_checker' => service('security.user_checker'),

diff --git a/Security.php b/Security.php
@@ -69,7 +69,7 @@ public function login(UserInterface $user, string $authenticatorName = null, str
         $authenticator = $this->getAuthenticator($authenticatorName, $firewallName);
 
         $this->container->get('security.user_checker')->checkPreAuth($user);
-        $this->container->get('security.user_authenticator')->authenticateUser($user, $authenticator, $request);
+        $this->container->get('security.authenticator.managers_locator')->get($firewallName)->authenticateUser($user, $authenticator, $request);
     }
 
     /**

diff --git a/Tests/Functional/app/SecurityHelper/config.yml b/Tests/Functional/app/SecurityHelper/config.yml
@@ -40,7 +40,16 @@ security:
             custom_authenticators:
                 - 'Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\AuthenticatorBundle\ApiAuthenticator'
             provider: main
+        second:
+            pattern: ^/second
+            form_login:
+                check_path: /second/login/check
+            custom_authenticators:
+                - 'Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\AuthenticatorBundle\ApiAuthenticator'
+            provider: main
 
     access_control:
         - { path: '^/main/login/check$', roles: IS_AUTHENTICATED_FULLY }
         - { path: '^/main/logged-in$', roles: IS_AUTHENTICATED_FULLY }
+        - { path: '^/second/login/check$', roles: IS_AUTHENTICATED_FULLY }
+        - { path: '^/second/logged-in$', roles: IS_AUTHENTICATED_FULLY }
diff --git a/Tests/Functional/app/SecurityHelper/routing.yml b/Tests/Functional/app/SecurityHelper/routing.yml
@@ -9,3 +9,11 @@ logged-in:
 force-logout:
     path: /main/force-logout
     controller: Symfony\Bundle\SecurityBundle\Tests\Functional\LogoutController::logout
+
+second-force-login:
+    path: /second/force-login
+    controller: Symfony\Bundle\SecurityBundle\Tests\Functional\ForceLoginController::welcome
+
+second-logged-in:
+    path: /second/logged-in
+    controller: Symfony\Bundle\SecurityBundle\Tests\Functional\LoggedInController
diff --git a/Tests/SecurityTest.php b/Tests/SecurityTest.php
@@ -141,7 +141,7 @@ public function testLogin()
             ->willReturnMap([
                 ['request_stack', $requestStack],
                 ['security.firewall.map', $firewallMap],
-                ['security.user_authenticator', $userAuthenticator],
+                ['security.authenticator.managers_locator', new ServiceLocator(['main' => fn () => $userAuthenticator])],
                 ['security.user_checker', $userChecker],
             ])
         ;