How to force user logout symfony2

Question

I want to force a user to logout in symfony2 after checking that it has not enough capabilities for access into a specific secured area.

I've tried with :

$this->get('request')->getSession()->invalidate();

but it seems that something goes wrong, the user still logged in until I logged him out using /logout route.

I've to mention that I'm using KayueWordpressBundle to connect my symfony app with a wordpress based website to create a custom back office.

Here is my security.yml file

security:
firewalls:
    dev:
        pattern:  ^/(_(profiler|wdt)|css|images|js)/
        security: false
    login_firewall:
        pattern:    ^/$
        anonymous:  ~
    secured_area:
        pattern:    ^/
        kayue_wordpress: ~
        form_login:
            check_path: /login_check
            login_path: /
        logout:
            path:   /logout
            target: /
access_control:
    - { path: ^/admin, roles: ROLE_ADMIN }

providers:
    wordpress:
        entity: { class: Kayue\WordpressBundle\Entity\User, property: username }

encoders:
    Kayue\WordpressBundle\Entity\User:
        id: kayue_wordpress.security.encoder.phpass

How can I do this please ?

Thank you

possible duplicate of Symfony2: how to log user out manually in controller? — Slava Fomin II
– Slava Fomin II, Commented Mar 2, 2015 at 15:38

Community · Accepted Answer · 2017-05-23 12:09:31Z

20

You can force logout by calling setToken() with null, try something like this:

$this->container->get('security.context')->setToken(null);

It will destroy user token from the security context and kick the user out.

Also, please see this question for more details: Symfony2: how to log user out manually in controller?

edited May 23, 2017 at 12:09

CommunityBot

11 silver badge

answered Nov 20, 2013 at 11:57

satdev86

8108 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Jaimin Over a year ago

above given solution will not call logout handler, if i have registered any handler for logout.

Ronan Over a year ago

BTW, use $this->container->get('security.authorization_checker') instead (new in 2.6)

Laurent W. Over a year ago

@Ronan, it's $this->container->get('security.token_storage'). See New in Symfony 2.6: Security component improvements.

Collectives™ on Stack Overflow

How to force user logout symfony2

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related