@@ -19,7 +19,7 @@ the session lasts using a cookie with the ``remember_me`` firewall option:
19
19
main :
20
20
# ...
21
21
remember_me :
22
- secret : ' %kernel.secret%' # required
22
+ secret : ' %kernel.secret%'
23
23
lifetime : 604800 # 1 week in seconds
24
24
# by default, the feature is enabled by checking a
25
25
# checkbox in the login form (see below), uncomment the
@@ -44,7 +44,7 @@ the session lasts using a cookie with the ``remember_me`` firewall option:
44
44
<firewall name =" main" >
45
45
<!-- ... -->
46
46
47
- <!-- secret: required
47
+ <!-- secret: default to "%kernel.secret%"
48
48
lifetime: 604800 is 1 week in seconds -->
49
49
<remember-me
50
50
secret =" %kernel.secret%"
@@ -67,7 +67,7 @@ the session lasts using a cookie with the ``remember_me`` firewall option:
67
67
$security->firewall('main')
68
68
// ...
69
69
->rememberMe()
70
- ->secret('%kernel.secret%') // required
70
+ ->secret('%kernel.secret%')
71
71
->lifetime(604800) // 1 week in seconds
72
72
73
73
// by default, the feature is enabled by checking a
@@ -77,9 +77,11 @@ the session lasts using a cookie with the ``remember_me`` firewall option:
77
77
;
78
78
};
79
79
80
- The ``secret `` option is the only required option and it is used to sign
81
- the remember me cookie. It's common to use the ``kernel.secret `` parameter,
82
- which is defined using the ``APP_SECRET `` environment variable.
80
+ .. versionadded :: 7.2
81
+
82
+ The ``secret `` option is no longer required starting from Symfony 7.2. By
83
+ default, ``%kernel.secret% `` is used, which is defined using the
84
+ ``APP_SECRET `` environment variable.
83
85
84
86
After enabling the ``remember_me `` system in the configuration, there are a
85
87
couple more things to do before remember me works correctly:
@@ -171,7 +173,6 @@ allow users to opt-out. In these cases, you can use the
171
173
main :
172
174
# ...
173
175
remember_me :
174
- secret : ' %kernel.secret%'
175
176
# ...
176
177
always_remember_me : true
177
178
@@ -194,7 +195,6 @@ allow users to opt-out. In these cases, you can use the
194
195
<!-- ... -->
195
196
196
197
<remember-me
197
- secret =" %kernel.secret%"
198
198
always-remember-me =" true"
199
199
/>
200
200
</firewall >
@@ -211,7 +211,6 @@ allow users to opt-out. In these cases, you can use the
211
211
$security->firewall('main')
212
212
// ...
213
213
->rememberMe()
214
- ->secret('%kernel.secret%')
215
214
// ...
216
215
->alwaysRememberMe(true)
217
216
;
@@ -335,7 +334,6 @@ are fetched from the user object using the
335
334
main :
336
335
# ...
337
336
remember_me :
338
- secret : ' %kernel.secret%'
339
337
# ...
340
338
signature_properties : ['password', 'updatedAt']
341
339
@@ -357,7 +355,7 @@ are fetched from the user object using the
357
355
<firewall name =" main" >
358
356
<!-- ... -->
359
357
360
- <remember-me secret = " %kernel.secret% " >
358
+ <remember-me >
361
359
<signature-property >password</signature-property >
362
360
<signature-property >updatedAt</signature-property >
363
361
</remember-me >
@@ -375,7 +373,6 @@ are fetched from the user object using the
375
373
$security->firewall('main')
376
374
// ...
377
375
->rememberMe()
378
- ->secret('%kernel.secret%')
379
376
// ...
380
377
->signatureProperties(['password', 'updatedAt'])
381
378
;
@@ -419,7 +416,6 @@ You can enable the doctrine token provider using the ``doctrine`` setting:
419
416
main :
420
417
# ...
421
418
remember_me :
422
- secret : ' %kernel.secret%'
423
419
# ...
424
420
token_provider :
425
421
doctrine : true
@@ -442,7 +438,7 @@ You can enable the doctrine token provider using the ``doctrine`` setting:
442
438
<firewall name =" main" >
443
439
<!-- ... -->
444
440
445
- <remember-me secret = " %kernel.secret% " >
441
+ <remember-me >
446
442
<token-provider doctrine =" true" />
447
443
</remember-me >
448
444
</firewall >
@@ -459,7 +455,6 @@ You can enable the doctrine token provider using the ``doctrine`` setting:
459
455
$security->firewall('main')
460
456
// ...
461
457
->rememberMe()
462
- ->secret('%kernel.secret%')
463
458
// ...
464
459
->tokenProvider([
465
460
'doctrine' => true,
0 commit comments