Skip to content

Commit 9720793

Browse files
committed
Merge branch '5.4' into 6.2
* 5.4: Improve security logout options
2 parents 91bbf2a + 1331fbb commit 9720793

File tree

1 file changed

+12
-9
lines changed

1 file changed

+12
-9
lines changed

reference/configuration/security.rst

Lines changed: 12 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -348,10 +348,13 @@ redirected to the ``default_target_path`` to avoid a redirection loop.
348348
For historical reasons, and to match the misspelling of the HTTP standard,
349349
the option is called ``use_referer`` instead of ``use_referrer``.
350350

351-
**Options Related to Logout Configuration**
351+
logout
352+
~~~~~~
353+
354+
You can configure logout options.
352355

353356
delete_cookies
354-
~~~~~~~~~~~~~~
357+
..............
355358

356359
**type**: ``array`` **default**: ``[]``
357360

@@ -426,7 +429,7 @@ user logs out::
426429
]);
427430
428431
invalidate_session
429-
~~~~~~~~~~~~~~~~~~
432+
..................
430433

431434
**type**: ``boolean`` **default**: ``true``
432435

@@ -439,14 +442,14 @@ option to ``false`` in every firewall and the user will only be logged out from
439442
the current firewall and not the other ones.
440443

441444
``path``
442-
~~~~~~~~
445+
........
443446

444447
**type**: ``string`` **default**: ``/logout``
445448

446449
The path which triggers logout. You need to set up a route with a matching path.
447450

448451
target
449-
~~~~~~
452+
......
450453

451454
**type**: ``string`` **default**: ``/``
452455

@@ -457,7 +460,7 @@ redirect after logout.
457460
.. _reference-security-logout-csrf:
458461

459462
enable_csrf
460-
~~~~~~~~~~~
463+
...........
461464

462465
**type**: ``boolean`` **default**: ``null``
463466

@@ -470,22 +473,22 @@ option if you need to use a custom CSRF token generator.
470473
The ``enable_csrf`` option was introduced in Symfony 6.2.
471474

472475
csrf_parameter
473-
~~~~~~~~~~~~~~
476+
..............
474477

475478
**type**: ``string`` **default**: ``'_csrf_token'``
476479

477480
The name of the parameter that stores the CSRF token value.
478481

479482
csrf_token_generator
480-
~~~~~~~~~~~~~~~~~~~~
483+
....................
481484

482485
**type**: ``string`` **default**: ``null``
483486

484487
The ``id`` of the service used to generate the CSRF tokens. Symfony provides a
485488
default service whose ID is ``security.csrf.token_manager``.
486489

487490
csrf_token_id
488-
~~~~~~~~~~~~~
491+
.............
489492

490493
**type**: ``string`` **default**: ``'logout'``
491494

0 commit comments

Comments
 (0)