You've mastered the basics of Symfony Security: authentication, authorization, roles, and voters. But what about those tricky, real-world security requirements that go beyond a simple login form?
That's where our latest SymfonyCasts course comes in:
Symfony Security: Going Further
Picking up where Symfony Security: The Basics left off, this course dives into more advanced security features, from custom login flows and password resets to sudo mode and user impersonation.
And while the course uses Symfony 8, everything also works with Symfony 7!
What This Course Covers
We tackle real-world security challenges, including:
- Disabling users and forcing them to log out
- Customizing authentication errors and login redirects
- Requiring full authentication with sudo mode
- Creating a super admin voter and restricting impersonation
- Allowing login with a username or email address
- Building password reset and change password forms
- Enforcing strong, uncompromised passwords
- Rate limiting registration to prevent abuse
The goal is to learn how to combine Symfony's built-in tools to solve real security problems without reinventing the wheel.
Who Is This For?
If you're comfortable with the basics of Symfony Security and want to explore its more advanced features, this course is for you. Whether you're building a new application or improving an existing one, you'll learn practical techniques for making your security system more flexible and robust.
In Case You Missed It...
We've also been sharing some tips and discoveries over on the SymfonyCasts blog:
Ideal GitHub Actions for Symfony Apps - a ready-to-use CI setup covering testing, linting, static analysis, and dependency security.
Force Refresh a Symfony Cache Item with beta: INF - discover a little-known Cache Contracts feature for forcing cached values to refresh.
What's Next on SymfonyCasts?
We're not quite done with Symfony Security! Our next course explores the new features coming in Symfony 8.2:
- Symfony 8.2 Security Upgrades -
discover new helpers like
logout_button(), CSRF-protected impersonation, improved handling of disabled users, and a more powerful sudo mode.
And after security, we're turning our attention to testing:
- E2E Testing - learn how to test complete user flows in a real browser using Playwright-PHP, with real JavaScript, database isolation, and fast, reliable tests.
Stay tuned - there's plenty more Symfony goodness on the way!