so called user providers that hold the users credentials.

Getting Started

use Symfony\Component\Security\Core\Authentication\AuthenticationTrustResolver;

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;

use Symfony\Component\Security\Core\Authorization\AccessDecisionManager;

use Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter;

use Symfony\Component\Security\Core\Authorization\Voter\RoleVoter;

use Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter;

use Symfony\Component\Security\Core\Exception\AccessDeniedException;

use Symfony\Component\Security\Core\Role\RoleHierarchy;

$accessDecisionManager = new AccessDecisionManager([

new AuthenticatedVoter(new AuthenticationTrustResolver()),

new RoleVoter(),

new RoleHierarchyVoter(new RoleHierarchy([

'ROLE_ADMIN' => ['ROLE_USER'],

]))

]);

$user = new \App\Entity\User(...);

$token = new UsernamePasswordToken($user, 'main', $user->getRoles());

if (!$accessDecisionManager->decide($token, ['ROLE_ADMIN'])) {

throw new AccessDeniedException();

}

The Security HTTP component provides an HTTP integration of the Security Core

component. It allows securing (parts of) your application using firewalls and

provides authenticators to authenticate visitors.

Getting Started