{% extends '@WebProfiler/Profiler/layout.html.twig' %}{% block page_title 'Security' %}{% block toolbar %} {% if collector.firewall %} {% set color_code = collector.enabled and not collector.authenticatorManagerEnabled ? 'yellow' %} {% set icon %} {{ include('@Security/Collector/icon.svg') }} <span class="sf-toolbar-value">{{ collector.user|default('n/a') }}</span> {% endset %} {% set text %} {% if collector.impersonated %} <div class="sf-toolbar-info-group"> <div class="sf-toolbar-info-piece"> <b>Impersonator</b> <span>{{ collector.impersonatorUser }}</span> </div> </div> {% endif %} <div class="sf-toolbar-info-group"> {% if collector.enabled %} {% if collector.token %} <div class="sf-toolbar-info-piece"> <b>Logged in as</b> <span>{{ collector.user }}</span> </div> <div class="sf-toolbar-info-piece"> <b>Authenticated</b> <span class="sf-toolbar-status sf-toolbar-status-{{ collector.authenticated ? 'green' : 'yellow' }}">{{ collector.authenticated ? 'Yes' : 'No' }}</span> </div> <div class="sf-toolbar-info-piece"> <b>Roles</b> <span> {% set remainingRoles = collector.roles|slice(1) %} {{ collector.roles|first }} {% if remainingRoles is not empty %} + <abbr title="{{ remainingRoles|join(', ') }}"> {{ remainingRoles|length }} more </abbr> {% endif %} </span> </div> <div class="sf-toolbar-info-piece"> <b>Token class</b> <span>{{ collector.tokenClass|abbr_class }}</span> </div> {% else %} <div class="sf-toolbar-info-piece"> <b>Authenticated</b> <span class="sf-toolbar-status sf-toolbar-status-yellow">No</span> </div> {% endif %} {% if collector.firewall %} <div class="sf-toolbar-info-piece"> <b>Firewall name</b> <span>{{ collector.firewall.name }}</span> </div> {% endif %} {% if collector.token and collector.logoutUrl %} <div class="sf-toolbar-info-piece"> <b>Actions</b> <span> <a href="{{ collector.logoutUrl }}">Logout</a> {% if collector.impersonated and collector.impersonationExitPath %} | <a href="{{ collector.impersonationExitPath }}">Exit impersonation</a> {% endif %} </span> </div> {% endif %} {% else %} <div class="sf-toolbar-info-piece"> <span>The security is disabled.</span> </div> {% endif %} </div> {% endset %} {{ include('@WebProfiler/Profiler/toolbar_item.html.twig', { link: profiler_url, status: color_code }) }} {% endif %}{% endblock %}{% block menu %} <span class="label {{ not collector.firewall or not collector.token ? 'disabled' }}"> <span class="icon">{{ include('@Security/Collector/icon.svg') }}</span> <strong>Security</strong> </span>{% endblock %}{% block panel %} <h2>Security</h2> {% if collector.enabled %} <div class="sf-tabs"> <div class="tab {{ collector.token is empty ? 'disabled' }}"> <h3 class="tab-title">Token</h3> <div class="tab-content"> {% if collector.token %} <div class="metrics"> <div class="metric"> <span class="value">{{ collector.user == 'anon.' ? 'Anonymous' : collector.user }}</span> <span class="label">Username</span> </div> <div class="metric"> <span class="value">{{ include('@WebProfiler/Icon/' ~ (collector.authenticated ? 'yes' : 'no') ~ '.svg') }}</span> <span class="label">Authenticated</span> </div> </div> <table> <thead> <tr> <th scope="col" class="key">Property</th> <th scope="col">Value</th> </tr> </thead> <tbody> <tr> <th>Roles</th> <td> {{ collector.roles is empty ? 'none' : profiler_dump(collector.roles, maxDepth=1) }} {% if not collector.authenticated and collector.roles is empty %} <p class="help">User is not authenticated probably because they have no roles.</p> {% endif %} </td> </tr> {% if collector.supportsRoleHierarchy %} <tr> <th>Inherited Roles</th> <td>{{ collector.inheritedRoles is empty ? 'none' : profiler_dump(collector.inheritedRoles, maxDepth=1) }}</td> </tr> {% endif %} {% if collector.token %} <tr> <th>Token</th> <td>{{ profiler_dump(collector.token) }}</td> </tr> {% endif %} </tbody> </table> {% elseif collector.enabled %} <div class="empty"> <p>There is no security token.</p> </div> {% endif %} </div> </div> <div class="tab {{ collector.firewall.security_enabled is empty ? 'disabled' }}"> <h3 class="tab-title">Firewall</h3> <div class="tab-content"> {% if collector.firewall %} <div class="metrics"> <div class="metric"> <span class="value">{{ collector.firewall.name }}</span> <span class="label">Name</span> </div> <div class="metric"> <span class="value">{{ include('@WebProfiler/Icon/' ~ (collector.firewall.security_enabled ? 'yes' : 'no') ~ '.svg') }}</span> <span class="label">Security enabled</span> </div> <div class="metric"> <span class="value">{{ include('@WebProfiler/Icon/' ~ (collector.firewall.stateless ? 'yes' : 'no') ~ '.svg') }}</span> <span class="label">Stateless</span> </div> {% if collector.authenticatorManagerEnabled == false %} <div class="metric"> <span class="value">{{ include('@WebProfiler/Icon/' ~ (collector.firewall.allows_anonymous ? 'yes' : 'no') ~ '.svg') }}</span> <span class="label">Allows anonymous</span> </div> {% endif %} </div> {% if collector.firewall.security_enabled %} <h4>Configuration</h4> <table> <thead> <tr> <th scope="col" class="key">Key</th> <th scope="col">Value</th> </tr> </thead> <tbody> <tr> <th>provider</th> <td>{{ collector.firewall.provider ?: '(none)' }}</td> </tr> <tr> <th>context</th> <td>{{ collector.firewall.context ?: '(none)' }}</td> </tr> <tr> <th>entry_point</th> <td>{{ collector.firewall.entry_point ?: '(none)' }}</td> </tr> <tr> <th>user_checker</th> <td>{{ collector.firewall.user_checker ?: '(none)' }}</td> </tr> <tr> <th>access_denied_handler</th> <td>{{ collector.firewall.access_denied_handler ?: '(none)' }}</td> </tr> <tr> <th>access_denied_url</th> <td>{{ collector.firewall.access_denied_url ?: '(none)' }}</td> </tr> {% if collector.authenticatorManagerEnabled %} <tr> <th>authenticators</th> <td>{{ collector.firewall.authenticators is empty ? '(none)' : profiler_dump(collector.firewall.authenticators, maxDepth=1) }}</td> </tr> {% else %} <tr> <th>listeners</th> <td>{{ collector.firewall.listeners is empty ? '(none)' : profiler_dump(collector.firewall.listeners, maxDepth=1) }}</td> </tr> {% endif %} </tbody> </table> {% endif %} {% endif %} </div> </div> <div class="tab {{ collector.listeners|default([]) is empty ? 'disabled' }}"> <h3 class="tab-title">Listeners</h3> <div class="tab-content"> {% if collector.listeners|default([]) is empty %} <div class="empty"> <p>No security listeners have been recorded. Check that debugging is enabled in the kernel.</p> </div> {% else %} <table> <thead> <tr> <th>Listener</th> <th>Duration</th> <th>Response</th> </tr> </thead> {% set previous_event = (collector.listeners|first) %} {% for listener in collector.listeners %} {% if loop.first or listener != previous_event %} {% if not loop.first %} </tbody> {% endif %} <tbody> {% set previous_event = listener %} {% endif %} <tr> <td class="font-normal">{{ profiler_dump(listener.stub) }}</td> <td class="no-wrap">{{ '%0.2f'|format(listener.time * 1000) }} ms</td> <td class="font-normal">{{ listener.response ? profiler_dump(listener.response) : '(none)' }}</td> </tr> {% if loop.last %} </tbody> {% endif %} {% endfor %} </table> {% endif %} </div> </div> <div class="tab {{ collector.authenticators|default([]) is empty ? 'disabled' }}"> <h3 class="tab-title">Authenticators</h3> <div class="tab-content"> {% if collector.authenticators|default([]) is not empty %} <table> <thead> <tr> <th>Authenticator</th> <th>Supports</th> <th>Duration</th> <th>Passport</th> </tr> </thead> {% set previous_event = (collector.listeners|first) %} {% for authenticator in collector.authenticators %} {% if loop.first or authenticator != previous_event %} {% if not loop.first %} </tbody> {% endif %} <tbody> {% set previous_event = authenticator %} {% endif %} <tr> <td class="font-normal">{{ profiler_dump(authenticator.stub) }}</td> <td class="no-wrap">{{ include('@WebProfiler/Icon/' ~ (authenticator.supports ? 'yes' : 'no') ~ '.svg') }}</td> <td class="no-wrap">{{ '%0.2f'|format(authenticator.duration * 1000) }} ms</td> <td class="font-normal">{{ authenticator.passport ? profiler_dump(authenticator.passport) : '(none)' }}</td> </tr> {% if loop.last %} </tbody> {% endif %} {% endfor %} </table> {% else %} <div class="empty"> <p>No authenticators have been recorded. Check previous profiles on your authentication endpoint.</p> </div> {% endif %} </div> </div> <div class="tab {{ collector.accessDecisionLog|default([]) is empty ? 'disabled' }}"> <h3 class="tab-title">Access Decision</h3> <div class="tab-content"> {% if collector.voters|default([]) is not empty %} <div class="metrics"> <div class="metric"> <span class="value">{{ collector.voterStrategy|default('unknown') }}</span> <span class="label">Strategy</span> </div> </div> <table class="voters"> <thead> <tr> <th>#</th> <th>Voter class</th> </tr> </thead> <tbody> {% for voter in collector.voters %} <tr> <td class="font-normal text-small text-muted nowrap">{{ loop.index }}</td> <td class="font-normal">{{ profiler_dump(voter) }}</td> </tr> {% endfor %} </tbody> </table> {% endif %} {% if collector.accessDecisionLog|default([]) is not empty %} <h2>Access decision log</h2> <table class="decision-log"> <col style="width: 30px"> <col style="width: 120px"> <col style="width: 25%"> <col style="width: 60%"> <thead> <tr> <th>#</th> <th>Result</th> <th>Attributes</th> <th>Object</th> </tr> </thead> <tbody> {% for decision in collector.accessDecisionLog %} <tr class="voter_result"> <td class="font-normal text-small text-muted nowrap">{{ loop.index }}</td> <td class="font-normal"> {{ decision.result ? '<span class="label status-success same-width">GRANTED</span>' : '<span class="label status-error same-width">DENIED</span>' }} </td> <td> {% if decision.attributes|length == 1 %} {% set attribute = decision.attributes|first %} {% if attribute.expression is defined %} Expression: <pre><code>{{ attribute.expression }}</code></pre> {% elseif attribute.type == 'string' %} {{ attribute }} {% else %} {{ profiler_dump(attribute) }} {% endif %} {% else %} {{ profiler_dump(decision.attributes) }} {% endif %} </td> <td>{{ profiler_dump(decision.seek('object')) }}</td> </tr> <tr class="voter_details"> <td></td> <td colspan="3"> {% if decision.voter_details is not empty %} {% set voter_details_id = 'voter-details-' ~ loop.index %} <div id="{{ voter_details_id }}" class="sf-toggle-content sf-toggle-hidden"> <table> <tbody> {% for voter_detail in decision.voter_details %} <tr> <td class="font-normal">{{ profiler_dump(voter_detail['class']) }}</td> {% if collector.voterStrategy == 'unanimous' %} <td class="font-normal text-small">attribute {{ voter_detail['attributes'][0] }}</td> {% endif %} <td class="font-normal text-small"> {% if voter_detail['vote'] == constant('Symfony\\Component\\Security\\Core\\Authorization\\Voter\\VoterInterface::ACCESS_GRANTED') %} ACCESS GRANTED {% elseif voter_detail['vote'] == constant('Symfony\\Component\\Security\\Core\\Authorization\\Voter\\VoterInterface::ACCESS_ABSTAIN') %} ACCESS ABSTAIN {% elseif voter_detail['vote'] == constant('Symfony\\Component\\Security\\Core\\Authorization\\Voter\\VoterInterface::ACCESS_DENIED') %} ACCESS DENIED {% else %} unknown ({{ voter_detail['vote'] }}) {% endif %} </td> </tr> {% endfor %} </tbody> </table> </div> <a class="btn btn-link text-small sf-toggle" data-toggle-selector="#{{ voter_details_id }}" data-toggle-alt-content="Hide voter details">Show voter details</a> {% endif %} </td> </tr> {% endfor %} </tbody> </table> </div> {% endif %} </div> </div> {% endif %}{% endblock %}