config/packages/security.yaml

@@ -23,6 +23,14 @@ security:
             custom_authenticators:
                 - App\Security\SQLLoginUserAuthenticator
 
+            entry_point: form_login
+            form_login:
+                login_path: app_login
+                check_path: app_login
+                username_parameter: login
+                password_parameter: password
+                enable_csrf: true
+
             login_throttling:
                 max_attempts: 3
             logout: true

src/Security/SQLLoginUserAuthenticator.php

@@ -13,13 +13,13 @@ use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Core\Security;
-use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
+use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
 use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
 use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
 
-class SQLLoginUserAuthenticator extends AbstractLoginFormAuthenticator
+class SQLLoginUserAuthenticator extends AbstractAuthenticator
 {
     public const LOGIN_ROUTE = 'app_login';
     public const ERROR_LOGIN = 'error_login';
@@ -52,11 +52,11 @@ class SQLLoginUserAuthenticator extends AbstractLoginFormAuthenticator
         return new RedirectResponse($this->baseUrl.'/connect/login-accept');
     }
 
-    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): Response
+    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
     {
         $request->getSession()->set(Security::AUTHENTICATION_ERROR, $exception);
 
-        return new RedirectResponse($this->baseUrl.'/login');
+        return new RedirectResponse($this->baseUrl.'/connect/login-accept');
     }
 
     public function authenticate(Request $request): Passport
@@ -100,9 +100,4 @@ class SQLLoginUserAuthenticator extends AbstractLoginFormAuthenticator
         $request->getSession()->set(self::ERROR_LOGIN, true);
         throw new AuthenticationException();
     }
-
-    protected function getLoginUrl(Request $request): string
-    {
-        return $this->baseUrl.'/login';
-    }
 }