php - how symfony2 remember me work without any table for token? -


i configure symfony2 add remember me functionality, how work without table in database save remember me token. mean best practice remember me cookie said in here

it stores username , token expiration token class name , signature in single cookie.

here it's being processed: https://github.com/symfony/symfony/blob/2.8/src/symfony/component/security/http/rememberme/tokenbasedremembermeservices.php#l39

so whole protection based on using secret token (the 1 specify in parameters) , user's password.

answering second part of "question" - pure cookie-based solution not use persistence layer, none of "best practices" applicable here.

symfony2 provide built-in persistence layer support storing remember-me tokens, , implement series-based logic it's explained in answer you're referring to.


Comments

Popular posts from this blog

facebook - android ACTION_SEND to share with specific application only -

python - Creating a new virtualenv gives a permissions error -

javascript - cocos2d-js draw circle not instantly -