The firewall function of symfony2 security, curl simulates form submission error reporting

Question

Hello everyone, due to business needs, I use curl simulation form instead of real form submission. However, when the system log shows that the authentication is successful, an error occurs during the jump. The error log is as follows: {code...} The simulation code is as follows: The configuration file is the same as the form submission, both are logintest, but the form...

过去多啦不再A梦 · Answer

In Symfony, Form will automatically add a hidden field of CSRF TOKEN (default name is _token) to prevent illegal submissions. When the form is submitted, the system will first detect the validity of _token, so the question When you submit using CURL, you must manually add _token and manually generate CSRF TOKEN:

$intention = 'test string';
$csrf      = $this->get('form.csrf_provider');

Generate CSRF TOKEN and:

$post_data['_token'] = $csrf->generateCsrfToken($intention);

Check whether the CSRF is valid when the form is submitted:

$token = $request->get('_token');

if( $csrf->isCsrfTokenValid($intention, $token) ) {
    return new Response('CSRF Token Invalid');
}

return new Response('Success');

Alternatively, you can disable CSRF directly in configureOptions:

$resolver->setDefaults(array(
    'csrf_protection' => true
));