Symfony basic HTTP authentication not working

Question

In a project using Symfony 2.8.14 I am using a very basic setup to enable basic HTTP Authentication in Symfony as described in http://symfony.com/doc/2.8/security.html

security.yml

security:

    encoders:
        Symfony\Component\Security\Core\User\User: plaintext

    providers:
        in_memory:
            memory:
                users:
                    myuser: { password: mypassword, roles: 'ROLE_USER' }

    firewalls:
        default:
            anonymous: ~
            http_basic: ~

    access_control:
        - { path: ^/myroute, roles: ROLE_USER }

When accessing /myroute on my local server I am prompted with the HTTP basic auth prompt. However, after entering the correct credentials, it just keeps showing me the prompt.

On a remote server there will be infinite "redirects" to the same route with a 401 status code after entering the correct credentials.

Both servers are running Apache 2.4 with PHP via FastCGI. There are other threads suggesting to add

# Sets the HTTP_AUTHORIZATION header removed by apache
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

to the /web/.htaccess due to a specific problem with Apache running PHP via FastCGI. However, this is already incorporated into the symfony/standard-edition (and is also present in my .htaccess).

I don't know what else to try.

fritzmg · Accepted Answer · 2016-11-21 16:30:41Z

5

One of the notes on http://php.net/manual/en/features.http-auth.php suggested adding this:

SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0

That helped. It appears the default .htaccess config of the symfony/standard-edition is not enough (at least in some Environments).

answered Nov 21, 2016 at 16:30

fritzmg

2,6654 gold badges26 silver badges58 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Matteo · Accepted Answer · 2016-11-21 16:28:05Z

2

Try specify this under firewalls:

firewalls:
    default:
        pattern:      ^/myroute
        anonymous: false
        provider: in_memory

Hope this help

answered Nov 21, 2016 at 16:28

Matteo

39.8k11 gold badges110 silver badges129 bronze badges

Comments

OlivierC · Accepted Answer · 2016-11-21 17:16:07Z

-1

You have to do this (go to new line)

providers:
    in_memory:
        memory:
            users:
                myuser:
                    { password: mypassword, roles: 'ROLE_USER' }

or you can also explose the array like this

providers:
    in_memory:
        memory:
            users:
                myuser:
                    password: mypassword
                    roles: 'ROLE_USER'

Otherwise myuser is considered as a string with value "{ password: mypassword, roles: 'ROLE_USER' }"

answered Nov 21, 2016 at 17:16

OlivierC

6824 silver badges11 bronze badges

5 Comments

fritzmg Over a year ago

No, you don't have to do a new line when you use the curly brackets. The problem was something else entirely (see answer).

OlivierC Over a year ago

I just tried it myself yesterday and it didn't work until i inserted a new line !

fritzmg Over a year ago

Must have been some other problem. New lines are not required in YAML when using any kind of brackets: symfony.com/doc/current/components/yaml/yaml_format.html

OlivierC Over a year ago

Well i had use your security.yml and it just worked with a new line.

fritzmg Over a year ago

Did your server environment use Apache with PHP running via FastCGI?

Collectives™ on Stack Overflow

Symfony basic HTTP authentication not working

3 Answers 3

Comments

Comments

5 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

5 Comments

Your Answer

Sign up or log in

Post as a guest

Related