SFCE Symfony 8.0 Certification

Symfony Version

Topics

1. PHP 0/86
2. HTTP 0/86
3. Symfony Architecture 0/103
4. Controllers 0/59
5. Routing 0/37
6. Templating with Twig 0/81
7. Forms 0/136
8. Data Validation 0/108
9. Dependency Injection 0/88
10. Security 0/102
11. Messenger 0/52
12. Console 0/55
13. Automated Tests 0/48
14. Miscellaneous 0/181

Security

12 chapters · 102 references · 0/102 completed

1. Security Core, CSRF and PasswordHasher components

0/5

Security How to Implement CSRF Protection How to Implement CSRF Protection - Generating and Checking CSRF Tokens Manually How to Implement CSRF Protection - Stateless CSRF Tokens Password Hashing and Verification

2. Authentication

0/14

Security - Authenticating Users Security - Form Login Security - JSON Login Security - HTTP Basic How to use Passwordless Login Link Authentication How to use Access Token Authentication How to Add "Remember Me" Login Functionality Security - Limiting Login Attempts Security - Login Programmatically Security - Logging Out Customizing the Form Login Authenticator Responses Security - X.509 Client Certificates Security - Remote Users Security - Security Events

3. Authorization

0/7

Security - Access Control (Authorization) Security - Add Code to Deny Access Security - Access Control in Templates Security - Checking to see if a User is Logged In Security - Allowing Unsecured Access (i.e. Anonymous Users) Using Expressions in Security Access Controls How to Impersonate a User

4. Configuration

0/9

Security Configuration Reference (SecurityBundle) Security Configuration Reference - access_denied_url Security Configuration Reference - expose_security_errors Security Configuration Reference - session_fixation_strategy Security Configuration Reference - access_decision_manager Security Configuration Reference - firewalls Security Configuration Reference - password_hashers Security Configuration Reference - providers Security Configuration Reference - role_hierarchy

5. Providers

0/7

User Providers User Providers - Entity User Provider User Providers - Using a Custom Query to Load the User User Providers - Memory User Provider User Providers - Chain User Provider User Providers - Creating a Custom User Provider How to Load Security Users from LDAP

6. Firewalls

0/10

Security - The Firewall Security - Fetching the Firewall Configuration for a Request How to Restrict Firewalls to a Request How to Customize Access Denied Responses The Entry Point: Helping Users Start Authentication Security Configuration Reference - stateless Security Configuration Reference - lazy Security Configuration Reference - context How to Impersonate a User How to Add "Remember Me" Login Functionality

7. Users

0/8

Security - The User Security - Fetching the User from a Controller Security - Fetching the User from a Service Security - Fetch the User in a Template How to Create and Enable Custom User Checkers How to Create and Enable Custom User Checkers - Using Multiple User Checkers Security - Understanding how Users are Refreshed from the Session Security - Comparing Users Manually with EquatableInterface

8. Password hashers

0/10

Password Hashing and Verification - Configuring a Password Hasher Password Hashing and Verification - Hashing the Password Password Hashing and Verification - Injecting a Specific Password Hasher Password Hashing and Verification - Password Migration Password Hashing and Verification - Dynamic Password Hashers Password Hashing and Verification - Hashing a Stand-Alone String Password Hashing and Verification - Supported Algorithms Password Hashing and Verification - The "auto" Hasher Password Hashing and Verification - The Bcrypt Password Hasher Password Hashing and Verification - The Sodium Password Hasher

9. Roles

0/3

Security - Roles Security - Hierarchical Roles Security Configuration Reference - role_hierarchy

10. Access Control Rules

0/9

How Does the Security access_control Work? How Does the Security access_control Work? - Matching Options How Does the Security access_control Work? - Access Enforcement How Does the Security access_control Work? - Matching access_control By IP How Does the Security access_control Work? - Securing by an Expression How Does the Security access_control Work? - Forcing a Channel (http, https) How Does the Security access_control Work? - Restrict to a port How to Force HTTPS or HTTP for different URLs How to Customize Access Denied Responses

11. Authenticators, Passports and Badges

0/11

How to Write a Custom Authenticator How to Write a Custom Authenticator - Security Passports How to Write a Custom Authenticator - User Identifier How to Write a Custom Authenticator - User Credential How to Write a Custom Authenticator - Self Validating Passport How to Write a Custom Authenticator - Passport Badges How to Write a Custom Authenticator - Passport Attributes Security Configuration Reference - required_badges How to use Access Token Authentication Customizing the Form Login Authenticator Responses How to use Passwordless Login Link Authentication

12. Voters and voting strategies

0/9

How to Use Voters to Check User Permissions How to Use Voters to Check User Permissions - The Voter Interface How to Use Voters to Check User Permissions - Creating the Custom Voter How to Use Voters to Check User Permissions - Configuring the Voter How to Use Voters to Check User Permissions - Checking for Roles inside a Voter How to Use Voters to Check User Permissions - Improving Voter Performance How to Use Voters to Check User Permissions - Changing the Access Decision Strategy How to Use Voters to Check User Permissions - Custom Access Decision Strategy Security - Granting Anonymous Users Access in a Custom Voter

© 2026 Krzysztof Kardasz

· Get the App · Privacy Policy · Content Rights · · Sponsor ·

Your privacy choices

With your permission, we use Google Analytics cookies to understand visits and improve this website. Google receives usage and device data and may process it in the United States. Analytics stays off until you accept. Essential storage remembers your privacy choice, theme and study progress. You can use the whole site without analytics and withdraw consent anytime through Cookie settings. Privacy & cookie policy