Skip to content

Commit 4aebc3c

Browse files
committed
minor symfony#5630 Add a caution about logout when using http-basic authenticated firewall (rmed19)
This PR was merged into the 2.3 branch. Discussion ---------- Add a caution about logout when using http-basic authenticated firewall Hi, I found many developers on stackoverflow asking how to logout from http_basic auth in Symfony2. So I added a caution about it. | Q | A | ------------- | --- | Doc fix? | no | New docs? | yes | Applies to | +2.3 Commits ------- 3a0bd9d Add a caution about logout when using http-basic authenticated firewall
2 parents ce3e36c + 3a0bd9d commit 4aebc3c

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

book/security.rst

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1135,6 +1135,13 @@ is defined by the ``target`` parameter above (e.g. the ``homepage``).
11351135
:class:`Symfony\\Component\\Security\\Http\\Logout\\LogoutSuccessHandlerInterface`.
11361136
See :doc:`Security Configuration Reference </reference/configuration/security>`.
11371137

1138+
.. caution::
1139+
1140+
Notice that when using http-basic authenticated firewall there is no real
1141+
way to log out : the only way to 'logout' is to have the browser stop sending your name and password
1142+
on every request. Clearing your browser cache, restarting your browser usually helps, and some web developer
1143+
tools might be helpful here.
1144+
11381145
.. _`security-encoding-password`:
11391146

11401147
Dynamically Encoding a Password

0 commit comments

Comments
 (0)