Download the PHP package jmikola/auto-login-bundle without Composer

JmikolaAutoLoginBundle

This bundle integrates the AutoLogin library with Symfony, which implements a security firewall listener to authenticate users based on a single query parameter. This is useful for providing one-click login functionality in email and newsletter links.

Installation

The bundle is published as a package and is installable via Composer:

Activate the bundle in your application kernel:

Compatibility

This bundle requires Symfony 4.3 or above.

Usage and Configuration

You need to create a new UserProvider service that implements Jmikola\AutoLogin\User\AutoLoginUserProviderInterface. This service is responsible for resolving the URL token to a user object.

This bundle registers a firewall listener, which is configured via the jmikola_auto_login key in your security component's firewall configuration. See this example configuration:

In the example above, we specify a custom service for auto_login_user_provider since the default EntityUserProvider does not implement AutoLoginUserProviderInterface.

When visiting http://example.com/path?_al=foobar, AcmeAutoLoginUserProvider::loadUserByAutoLoginToken() will be invoked with the value "foobar". This method should resolve that value to a user object or throw a Jmikola\AutoLogin\Exception\AutoLoginTokenNotFoundException.

Listener Options

The AutoLoginFactory defines the following listener options:

• auto_login_user_provider: AutoLoginUserProviderInterface service, which provides a method to load users by an auto-login token (i.e. query parameter). If this service is not defined, the listener's user provider will be used by default and an exception will be thrown if the provider does not implement the required interface (in addition to UserProviderInterface).
• provider: User provider key. This is a standard option for most security listeners. If undefined, the default user provider for the firewall is used (see: SecurityBundle documentation).
• token_param: The query parameter to be checked for an auto-login token. The presence of this query parameter will determine if the auto-login listener attempts authentication. In that respect, it is similar to the check_path option for the form-login listener. If undefined, the option defaults to _al.
• override_already_authenticated: Boolean option determines whether an auto-login token should override an existing, authenticated session. This option defaults to false.

Alternative Configuration Example

In this example, we specify a provider that implements both Symfony\Component\Security\Core\User\UserProviderInterface and Jmikola\AutoLogin\User\AutoLoginUserProviderInterface. We also customize the URL parameter to use "auto_login" instead of the default "_al":

FOSUserBundle Configuration Example

If you are using FOSUserBundle, defining a service ID for your user provider will look familiar. You can easily integrate this bundle with FOSUserBundle by defining a custom service for fos_user.user_manager: