Master Symfony's Security at Symfony Day Cologne!

Sep 8, 2011 − Love Symfony but still working on mastering its security layer! Great! Join me in October at Symfony Day Cologne for a workshop that's all about Symfony's security.

Love Symfony but still working on mastering its security layer? Great! Join me in October at Symfony Day Cologne for a workshop that's all about Symfony's security. With a full day focused on security, we'll have the chance to write some code that accomplishes some pretty amazing things!

Security is one of the most fascinating and rich features in Symfony2. But it has a lot of moving pieces, the first of which are authentication and authorization. These two independent systems respectively control the identification of a user and whether or not that user has access to a resource. Inside of authentication, listeners, user providers, tokens and entry points fuel the process of reading credentials from a request and loading users. Authorization uses roles, voters and even ACL's to determine whether or not that user has access to any part of your system. All of this means that Symfony's security system gives you unrivaled flexibility - the trick is to learn to harness that power!

Together, we'll build some real code to accomplish some really cool things with the security layer:

• Setup basic security, and discuss the most important players

• Install the FOSUserBundle, configure it, customize the layout, override some forms and controllers, and create user fixtures

• Expose an API with token-based security by creating a custom authentication provider, user provider and token

• Allow our frontend users to login with Facebook or Twitter

• Leverage the "Remember me" functionality

• Add a "voter" to control access to certain resources

• Explore other aspects of authorization, such as ACL's and annotations

Phew! Ready? Then register for the security workshop and join me for a day of real development inside Symfony's security system. Oh, and we're going to have fun too!