Symfony 5 Security / Authentication Tutorial

ℹ Everything you need to know in order to secure your symfony application.

⚠️Notice - this series was recorded using symfony 5.2. There have been some minor changes and some classes have since been removed. You will still be able to follow this tutorial but you will need to combine the documentation in some parts.

💻Source code here:

🔗 Security documentation:

👇Follow me on Social Media:

Chapters:
0:00 Part 1 Login Form Authentication
12:12 Part 2 Validating Passwords + Login and Redirect
24:38 Part 3 Roles + Remember me + Access Control
33:28 Part 4 Register Form + Registration Confirmation
49:40 Part 5 Password Reset Form + Password Reset Requests
59:00 Part 6 Role Based Access Control
1:15:36 Part 7 Symfony Voters + Permissions
1:34:54 Part 8 Testing Authorization + Simulating Logged-in Users

[kinvain]

The tutorial is a pure gold! Thank you for sharing the knowledge.

[jasongoossens]

Thanks for the clear tutorial! Us junior devs really appreciate the level of detail!

[VipapkStudiosOfficial]

This is so freakin' amazing, cheers mate! :)

[oumaimakaboubi]

you are amazinggg thaaaanks a i appreciate the level of details keep up the great work Gary

[dvgnhdy]

I watched your videos about symfony. The courses on authorization and messenger turned out to be very interesting and useful.
I hope that you will release a big course on Symfony Workflow.

[pawecyrklaf]

Amazing video :D All things regarding symfony security in one place :D

[ginageorge]

how to fix the error Invalid credentials in symfony 5.3

[garethfoxtrot]

What do you think about workflow and process in next series? :)

[antontraceur]

Hey Gary, thank you for your tutorials!

I was wondering is there a way to have multiple firewalls? One for customers and another for administrators, obviously those two being two separate entities

[antontraceur]

Hey Gary hope you don't mind, I have another question for you 😅

Do you know why the roles are prefixed with "ROLE_" string?
Wouldn't it make more sense to call them something like "CAN_VIEW_ITEM", "IS_RESPONSIBLE_FOR_SOMETHING", etc.

[mohammadmahdimoqiseh]

hi thank you for this wonderful tutorial

i have one question
fosuserbundle handle all the registration, login, reset password and more important it has good access control and it is easy to use.
1. don't you recommend to use fosuserbundle instead?
i know that it is not maintenance anymore.
2. but is it going to be a problem in a project that it does not maintenance?

thank you for answering

[herodesh]

It would be super cool if you would have time to make a course about Symfony API Platform. The one on symfony casts about cheeses is absolutely ridiculous and childish. I would also gladly buy a course like that on Udemy! Anyways ... Great content!!!

[khalilchafter]

Hello Gary, I hope you're doing well ! I started with mysql, so what should i change in docker-compose file ?

[dristeebhugwan]

Hi, how do I create a list to show registered users? I'm learning symfony 5.3 as a beginner.

[uraljonjurayev]

What can be done if the "composer req api" command does not work in symfony 6 ?

[toufik]

Hallo,
thanks for your tutorial...
How to prevent going back to the secured page after logout in symfony

[GarronArgentina]

I think the schickling/mailcatcher configuration is missed!

[happysongs]

AbstractGuardAuthenticator is deprecated, are you planning to make these again for symfony 5.3 ?
It is gonna be really usefull and there is no content about that on youtube.
Thanks for all of this by the way.

[shamshullasam]

At time 32:45 :- Notice: Undefined variable: providerKey. this eroor comes, what is the problem.

[arkajyotidas]

Can anyone show me how to perform authentication in symfony 7, I am lost