Commit 682e1a56 authored by Fabien Potencier's avatar Fabien Potencier

minor #1532 Docs: Update interface reference for csrf.token_manager (thisisandrew)

This PR was merged into the 2.1.x-dev branch.

Discussion
----------

Docs: Update interface reference for csrf.token_manager

The csrf.token_manager is an implementation of CsrfTokenManagerInterface
Fix the label and link to the reference
Update Usage section to include creation of a new token

Commits
-------

0a0c2d9e Update interface reference for csrf.token_manager
parents 79c588dd 0a0c2d9e
...@@ -13,10 +13,9 @@ Services ...@@ -13,10 +13,9 @@ Services
-------- --------
* **csrf.token_manager**: An instance of an implementation of the * **csrf.token_manager**: An instance of an implementation of the
`CsrfProviderInterface `CsrfTokenManagerInterface
<http://api.symfony.com/master/Symfony/Component/Form/Extension/Csrf/CsrfProvider/CsrfProviderInterface.html>`_, <http://api.symfony.com/master/Symfony/Component/Security/Csrf/CsrfTokenManagerInterface.html>`_,
defaults to a `DefaultCsrfProvider
<http://api.symfony.com/master/Symfony/Component/Form/Extension/Csrf/CsrfProvider/DefaultCsrfProvider.html>`_.
Registering Registering
----------- -----------
...@@ -44,9 +43,11 @@ When the CSRF Service Provider is registered, all forms created via the Form ...@@ -44,9 +43,11 @@ When the CSRF Service Provider is registered, all forms created via the Form
Service Provider are protected against CSRF by default. Service Provider are protected against CSRF by default.
You can also use the CSRF protection even without using the Symfony Form You can also use the CSRF protection even without using the Symfony Form
component. If, for example, you're doing a DELETE action, you can check the component. If, for example, you're doing a DELETE action, you can create a token::
CSRF token::
use Symfony\Component\Security\Csrf\CsrfToken; use Symfony\Component\Security\Csrf\CsrfToken;
$csrfToken = $app['csrf.token_manager']->getToken('token_id'); //'TOKEN'
$app['csrf.token_manager']->isTokenValid(new CsrfToken('token_id', 'TOKEN')); then you can check the CSRF token::
$app['csrf.token_manager']->isTokenValid(new CsrfToken('token_id', 'TOKEN'));
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment