Download the PHP package flying/debug-bundle without Composer
On this page you can find all versions of the php package flying/debug-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download flying/debug-bundle
More information about flying/debug-bundle
Files in flying/debug-bundle
Package debug-bundle
Short Description Symfony 2 bundle to provide several tools to make it easier to use debugger with Symfony 2 applications
License MIT
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package debug-bundle
Debug bundle
This bundle provides several services that are mean to simplify developing process of Symfony 2 applications by emulating certain security related features in a case if request is running under debugger.
Debugger detection
Debugger detection is handled by , Xdebug and Zend Debugger are recognized at this moment.
If some service needs to know if request is running under debugger - it should implement to get request status as soon as it will be determined.
CSRF token validation emulation
When debugging form submissions - it may be useful to disable CSRF token validation under debugger while having CSRF validation enabled.
CSRF token validation emulation is controlled by configuration:
Unless enabled permanently - validation emulation is disabled automatically for production environment and can also be disabled in development environment. When enabled - it will substitute real CSRF validation with configured value if request was running under debugger. For normal requests all CSRF validation will be passed to real CSRF token manager unless use of emulation is forced by enabling configuration option.
Debug authentication provider
Debug authentication provider can be used to transparently authenticate user that is required for debugging / development purposes. Example use case is debugging of some requests that are resides into secured area of application without need to hack application's configuration all the time (slow, boring and error prone).
It is recommended to read Symfony book chapter about security and Symfony Cookbook recipe about custom authentication providers before using this feature.
Installation
To use debug authentication provider you're required to perform some changes into your code and configuration.
1. Create your own token builder
Security token is the key component of security in Symfony, you can read more about it here. Most of tasks related to creating custom authentication provider are handled by this bundle, but since token is too much specific for each particular application - it is your task to generate it. Luckily it is pretty easy. Token builder should implement , but you can also use as a base in most cases. You need to implement method that receives object and needs to create and return security token, required for your application. Simplest implementation may look something like this:
however real implementation may involve receiving user object from database or some other place. In a case if you use FOSUserBundle in your application - you may find it useful to inject their into class and take user from it.
Token builder can be used as a simple class, but it is preferable to register it as a service, especially if your token building logic depends on information from other services.
2. Register debug authentication provider
After implementing token builder you need to register debug authentication provider into your security configuration. Registration is explained here and may look like this:
It is important to register debug authentication provider before real authentication providers that are used into your application so it will be able to provide debug security token generated by you and by this disable other security mechanisms.
3. Configure debug authentication provider
Debug authentication provider has following configuration options:
-
- Either service id or class name of your token builder. This option is required.
-
- Arbitrary configuration information for your token builder. It is passed directly to your token builder via method. For example you can pass username of user, you want to authenticate.
-
- Allows you to completely disable or force this feature without any additional change. By default it is enabled for debug environments.
-
- Set to to enable user authentication substitution even if request is not running under debugger. May be useful for development purposes if you don't want to authenticate yourself all the time. Defaults to meaning that debug authentication provider will only activate itself if request is running under debugger.
- and options defines services of authentication provider and listener respectively and usually should not be changed.
