I am trying to use Symfony 2 security component, but I have a problem with IE9. It works in any other browser, which I found very odd. Symfony version 2.0.16.
Controller is like ‘in the book’. I have a custom template file for the login form, using the one from documentation doesn’t help. Also made custom routing paths, but specified them in seciurity config file. Here is the security config file, I have changed a little bit in there, but I think it is all in order…
security:
encoders:
Acme\MyBundle\Entity\User:
algorithm: sha1
encode_as_base64: true
iterations: 5
role_hierarchy:
ROLE_CLIENT: ROLE_USER
ROLE_MANAGER: ROLE_USER
ROLE_ADMIN: [ROLE_USER, ROLE_MANAGER, ROLE_ALLOWED_TO_SWITCH]
providers:
main:
entity: { class: Acme\MyBundle\Entity\User, property: email }
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
dev_custom:
pattern: ^/createUser
security: false
login:
pattern: ^/(login-custom|remind-pass)$
security: false
secured_area:
pattern: ^/
form_login:
login_path: /login-custom
check_path: /login-check-custom
logout:
path: /logout-custom
target: /
access_control:
- { path: ^/, roles: ROLE_USER }
After submitting form in IE9 I just get redirected back to the form, without validating data. In logfile I found:
[2012-08-14 02:51:00] security.INFO: Authentication request failed: Your session has timed-out, or you have disabled cookies. [] []
[2012-08-14 02:51:00] security.DEBUG: Redirecting to /login[] []
Ofcourse I have cookies enabled.
In ie console there is a warning ‘HTML1113 goin to quirks mode’.
What have I done wrong?
I’ve found the answer here:
ie complicated subdomain cookie problem
In short: ie silently drops cookies, when subdomain contains ‘undesrcore’. I thought I misconfigured the security component or got something wrong with templates or headers, but that was not the case.