Security Flashcards
What are the root elements of security configuration?
access_denied_url session_fixation_strategy hide_user_not_found always_authenticate_before_granting erase_credentials access_decision_manager encoders providers firewalls access_control role_hierarchy
What are allowed session fixation strategies?
none
migrate
invalidate
What are possible voter strategies?
affirmative
consensus
unanimous
What methods does Symfony\Component\Security\Core\Authentication\AuthenticationTrustResolverInterface define?
isAnonymous(TokenInterface $token = null)
isRememberMe(TokenInterface $token = null)
isFullFledged(TokenInterface $token = null)
What methods does Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface define?
isGranted($attribute, $subject = null);
What is the default access decision strategy?
affirmative
What methods does Symfony\Component\Security\Core\Authorization\Voter\VoterInterface define?
vote(TokenInterface $token, $subject, array $attributes);
What methods does Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface define?
decide(TokenInterface $token, array $attributes, $object = null);
What are possible configuration keys under security.access_decision_manager branch?
service
strategy
allow_if_all_abstain
allow_if_equal_granted_denied
What are available configuration values for security encoders?
algorithm migrate_from hash_algorithm key_length ignore_case encode_as_base64 iterations cost memory_cost time_cost id
What is the recommended Symfony password hashing algorythm?
Sodium
