Skip to content

[Ldap][Security] Make LdapAuthenticator an EntryPoint #42354

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Sep 26, 2021
Merged

[Ldap][Security] Make LdapAuthenticator an EntryPoint #42354

merged 2 commits into from
Sep 26, 2021

Conversation

dcp-dev
Copy link
Contributor

@dcp-dev dcp-dev commented Aug 3, 2021

Q A
Branch? 5.3
Bug fix? yes
New feature? no
Deprecations? no
Tickets Fix #42346
License MIT
Doc PR N/A

I added @chalasr's recommandations given in #42346 (comment)

@carsonbot
Copy link

Hey!

I see that this is your first PR. That is great! Welcome!

Symfony has a contribution guide which I suggest you to read.

In short:

  • Always add tests
  • Keep backward compatibility (see https://symfony.com/bc).
  • Bug fixes must be submitted against the lowest maintained branch where they apply (see https://symfony.com/releases)
  • Features and deprecations must be submitted against the 5.4 branch.

Review the GitHub status checks of your pull request and try to solve the reported issues. If some tests are failing, try to see if they are failing because of this change.

When two Symfony core team members approve this change, it will be merged and you will become an official Symfony contributor!
If this PR is merged in a lower version branch, it will be merged up to all maintained branches within a few days.

I am going to sit back now and wait for the reviews.

Cheers!

Carsonbot

Copy link
Member

@chalasr chalasr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR. 1 minor comment.
Sadly we don't have much tests for ldap-based authenticators so I'm ok to merge the patch without additional tests. But if you want to have a look and try to add some, that would be great.

@wouterj
Copy link
Member

wouterj commented Aug 6, 2021

Hi! I guess this is a question for @chalasr as he proposed this solution, but I don't think the LogicException works/is nice. This means that if the internal authenticator isn't an entry point, a user will get a 500 instead of the default authentication entry point behavior. It's perfectly valid for an authenticator to not be an entry point (e.g. see the JsonLoginFactory, which also has a json_login_ldap variant). Am I missing something or should we find a different way of approaching this? (maybe a special exception class that we catch when calling the start() method?)

Copy link
Member

@chalasr chalasr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just blocking merge to give us some time to address Wouter’s concerns :)

@carsonbot carsonbot changed the title [Ldap] Make LdapAuthenticator an EntryPoint [Ldap][Security] Make LdapAuthenticator an EntryPoint Sep 16, 2021
@chalasr
Copy link
Member

chalasr commented Sep 17, 2021

maybe a special exception class that we catch when calling the start() method?

That's the best approach AFAICT. I just pushed a commit doing that.
Review needed :)

@chalasr
Copy link
Member

chalasr commented Sep 26, 2021

PR ready (I need this for #42582)

@fabpot
Copy link
Member

fabpot commented Sep 26, 2021

Thank you @dcp-dev.

@fabpot fabpot merged commit b5cdb1c into symfony:5.3 Sep 26, 2021
@fabpot
Copy link
Member

fabpot commented Sep 26, 2021

@chalasr Merged now :)

@chalasr
Copy link
Member

chalasr commented Sep 26, 2021

Great, thanks!

@fabpot fabpot mentioned this pull request Sep 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants