Using same bundle for login about dunglasangularcsrfbundle HOT 3 CLOSED

Hi,

Thanks for your feedback.

I've not tested it but - as it uses events -, enabling CSRF protection through AngularCsrfBundle for the login_check route and disabling the native login form CSRF protection (remove the csrf_provider directive from security.yml should do the trick.

If it works, can you give us a feedback?

Thanks you.

from dunglasangularcsrfbundle.

Thanks for the quick response @dunglas and yes!, it works flawless. Your bundle is awesome!
Also the login path brings it's own csrf token and it doesn't interfere. So technically you can still have an html form for login and also an API login with csrf protection. Thanks!

Perhaps you may add this use case to the documentation?

from dunglasangularcsrfbundle.

You're welcome.

from dunglasangularcsrfbundle.