Release 2.61 (#5990)

config/bundles.php

@@ -19,4 +19,5 @@ return [
     Twig\Extra\TwigExtraBundle\TwigExtraBundle::class => ['all' => true],
     KevinPapst\TablerBundle\TablerBundle::class => ['all' => true],
     Scheb\TwoFactorBundle\SchebTwoFactorBundle::class => ['all' => true],
+    Symfony\Bundle\MakerBundle\MakerBundle::class => ['dev' => true],
 ];

config/packages/security.yaml

@@ -74,6 +74,7 @@ security:
             login_link:
                 check_route: link_login_check
                 lifetime: 900
+                login_path: login
                 max_uses: 3
                 # 'password' binds the HMAC signature to the password hash, so a
                 # link becomes invalid as soon as the user changes the password
@@ -93,6 +94,8 @@ security:
     access_control:
         - {path: '^/auth/2fa', role: IS_AUTHENTICATED_2FA_IN_PROGRESS}
         - {path: '^/auth', roles: PUBLIC_ACCESS}
+        - {path: '^/login', roles: PUBLIC_ACCESS}
+        - {path: '^/logout', roles: PUBLIC_ACCESS}
         - {path: '^/{_locale}$', role: PUBLIC_ACCESS}
         - {path: '^/{_locale}/auth', role: PUBLIC_ACCESS}
         - {path: '^/{_locale}/login', role: PUBLIC_ACCESS}

config/routes.yaml

@@ -46,6 +46,24 @@ homeLocale:
         route: homepage
         permanent: true
 
+# SF DefaultAuthenticationSuccessHandler uses /login as default target
+loginFallback:
+    path: /login
+    defaults:
+        _controller: Symfony\Bundle\FrameworkBundle\Controller\RedirectController::redirectAction
+        _locale: '%locale%'
+        route: login
+        permanent: true
+
+# SF LogoutListener uses /logout as default target
+logoutFallback:
+    path: /logout
+    defaults:
+        _controller: Symfony\Bundle\FrameworkBundle\Controller\RedirectController::redirectAction
+        _locale: '%locale%'
+        route: logout
+        permanent: true
+
 2fa_login:
     path: /{_locale}/auth/2fa
     defaults: