Symfony security component in examples
summary
Hands-on workshop that actually builds working examples: creates users with make:user and make:authenticator, adds a login form backed by a Guard/GWAD authenticator and a password encoder, and implements a stateless API firewall with an in-memory API key provider. Implements role checks, is_granted calls and custom voters for per-blog/article edit rules, adds a Doctrine filter to restrict lists to the current owner, and shows user checkers (expiration) plus CSRF guidance; code branches and gists are provided.
AI-written summary · about
chapters (15)
- 0:00Introduction and setup
- 2:41Authentication basics
- 9:42User creation and password encoding
- 16:02Firewalls and login forms
- 27:35Recap of authentication
- 30:06API authentication setup
- 40:12Coffee break and code review
- 41:55Authorization fundamentals
- 44:59Access control rules
- 47:12Security annotations and voters
- 51:13Implementing voters
- 59:23Filtering collections securely
- 1:02:42User checker and CSRF protection
- 1:07:48Code kata and challenges
- 1:10:23Quiz and prizes
related talks
57mSpring Security for N00bz: A quick introduction for the terminally insecure
02h 14mWeb application security (Part 1)
48mLaravel Authentication Deep Dive
01h 02mCode Review For Security
45mSpring Security: The Good Parts
52mSpring Security for N00bz: A quick introduction for the terminally insecure
52mArchitecture Deep Dive in Spring Security
01h 27mHands on Spring Security