make-security-form-login
Skill4 starsChanged 2 months agoMITView on GitHub
Use when the application needs a server-rendered login form.
In this repository24 other files it gives its agents.
- AGENTS.mdAGENTS.md
- cli-conventionsSkill
- componentsSkill
- configurationSkill
- discoverSkill
- make-ciSkill
- make-commandSkill
- make-controllerSkill
- make-crudSkill
- make-decoratorSkill
- make-entitySkill
- make-formSkill
- make-listenerSkill
- make-migrationSkill
- make-registration-formSkill
- make-reset-passwordSkill
- make-security-customSkill
- make-testSkill
- make-twig-extensionSkill
- make-userSkill
- make-voterSkill
- make-webhookSkill
- servicesSkill
- templatesSkill
The file
Files
Form login
symfony console make:security:form-login --controller-name=SecurityController --logoutThat is usually enough: the maker reads security.yaml and fills in the firewall, the
user class and the username field itself when they are unambiguous. When a guess is
ambiguous it aborts naming the option to pass (--firewall-name, --user-class,
--username-field) rather than prompting. --logout is deliberate: the prompt defaults
to yes, the option is opt-in, so a script states what it wants.
A user class and provider must exist first; that is make:user, the step before this
one. Install the maker if it is missing:
symfony composer require --dev symfony/maker-bundle.
What you get, and what to keep
A login controller with its Twig template, and a form_login entry under the firewall in
security.yaml. Keep the shape: the controller only renders the form and exposes the
last error, while the actual credential check runs inside the security system. A login
controller that starts reading the submitted password is rebuilding the authenticator by
hand. Leave CSRF protection on.
What to change
The template is a starting point and looks it. Where the user lands after login and logout is application policy, not something the maker can know.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.