Commit db3c9b82 authored by Fabien Potencier's avatar Fabien Potencier

bug #916 Support optional session invalidation on logout (neeg)

This PR was submitted for the master branch but it was merged into the 1.3 branch instead (closes #916).

Discussion
----------

Support optional session invalidation on logout

Avoid session destroying on logout by adding "invalidate_session: false" in your configuration e.g.

$app['security.firewalls'] = array(
[...]
        'logout' => array(
            'logout_path' => '/user/logout',
            'target_url' => '/logout',
            'invalidate_session' => false
        ),
[...]
);

Commits
-------

1a55ff82 Support optional session invalidation on logout
parents fcefc535 1a55ff82
......@@ -510,7 +510,10 @@ class SecurityServiceProvider implements ServiceProviderInterface
isset($options['with_csrf']) && $options['with_csrf'] && isset($app['form.csrf_provider']) ? $app['form.csrf_provider'] : null
);
$listener->addHandler(new SessionLogoutHandler());
$invalidateSession = isset($options['invalidate_session']) ? $options['invalidate_session'] : true;
if (true === $invalidateSession) {
$listener->addHandler(new SessionLogoutHandler());
}
return $listener;
});
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment