Question

Symfony2’s default SessionCsrfProvider can be replaced with another service that implements CsrfProviderInterface. However, the documentation does not tell where to define the replacing service id.

The default framework configuration allows only to set field_name and enabled/disabled flag. There is no similar configuration option as “storage_id” in sessions.

So, how to replace the default CSRF Provider?

Answer 1

Add this to your config.yml

services:
    form.csrf_provider: 
        class: YourNamespace\YourProvider
        arguments: [ @session, %kernel.secret% ]