Use firewall to secure user profile page

czcodecamp · Oct 21, 2016 · 0e65ffb · 0e65ffb
1 parent affae6f
commit 0e65ffb
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/app/config/security.yml b/app/config/security.yml
@@ -9,6 +9,23 @@ security:
             entity: { class: AppBundle:User, property: username }
 
     firewalls:
+        user_area:
+            pattern: ^/profile
+
+            form_login:
+                check_path: user_login
+                login_path: user_login
+                csrf_token_generator: security.csrf.token_manager
+                default_target_path: /
+
+            logout:
+                # The route name the user can go to in order to logout
+                path: user_logout
+                # The name of the route to redirect to after logging out
+                target: homepage
+
+            context: primary_auth
+
         secured_area:
             pattern: ^/
 
@@ -24,4 +41,6 @@ security:
                 # The route name the user can go to in order to logout
                 path: user_logout
                 # The name of the route to redirect to after logging out
-                target: homepage
+                target: homepage
+
+            context: primary_auth