php - how symfony2 remember me work without any table for token? -
i configure symfony2 add remember me functionality, how work without table in database save remember me token. mean best practice remember me cookie said in here
it stores username , token expiration token class name , signature in single cookie.
here it's being processed: https://github.com/symfony/symfony/blob/2.8/src/symfony/component/security/http/rememberme/tokenbasedremembermeservices.php#l39
so whole protection based on using secret
token (the 1 specify in parameters) , user's password.
answering second part of "question" - pure cookie-based solution not use persistence layer, none of "best practices" applicable here.
symfony2 provide built-in persistence layer support storing remember-me tokens, , implement series-based logic it's explained in answer you're referring to.
Comments
Post a Comment