Symfony 5.3+ 新认证系统：解决用户身份标识不一致导致的登录失效问题

Nov 11 10:22:24 |INFO | SECURI Authenticator successful!         authenticator="App\Security\LoginFormAuthenticator" token={"Symfony\Component\Security\Http\Authenticator\Token\PostAuthenticationToken":"PostAuthenticationToken(user="[email protected]", authenticated=true, roles="ROLE_SUPER_ADMIN, ROLE_USER")"}
...
Nov 11 10:22:25 |DEBUG| SECURI Stored the security token in the session. key="_security_main"
...
Nov 11 10:22:25 |DEBUG| SECURI Read existing security token from the session. key="_security_main" token_class="Symfony\Component\Security\Http\Authenticator\Token\PostAuthenticationToken"
Nov 11 10:22:25 |DEBUG| DOCTRI SELECT t0.id AS id_1, ... FROM user t0 WHERE t0.id = ? 0=1
Nov 11 10:22:25 |DEBUG| SECURI Cannot refresh token because user has changed. provider="Symfony\Bridge\Doctrine\Security\User\EntityUserProvider" username="[email protected]"
Nov 11 10:22:25 |DEBUG| SECURI Token was deauthenticated after trying to refresh it.

// AppEntityUser.php
public function getUserIdentifier(): string
{
    return (string) $this->email; // 问题所在：返回的是 email
}

// AppEntityUser.php
use SymfonyComponentSecurityCoreUserUserInterface; // 确保引入

class User implements UserInterface, PasswordAuthenticatedUserInterface, Serializable
{
    // ... 其他属性和方法 ...

    /**
     * A visual identifier that represents this user.
     *
     * @see UserInterface
     */
    public function getUserIdentifier(): string
    {
        // 确保这里返回的是用于认证的唯一标识符，与 LoginFormAuthenticator 中的逻辑一致
        return (string) $this->username; // 修正：返回 username
    }

    // ... 其他属性和方法 ...
}

// AppSecurityLoginFormAuthenticator.php
use SymfonyComponentSecurityHttpAuthenticatorPassportBadgeUserBadge;
use SymfonyComponentSecurityHttpAuthenticatorPassportPassport;
use SymfonyComponentSecurityHttpAuthenticatorPassportPassportInterface;

class LoginFormAuthenticator extends AbstractAuthenticator
{
    // ... 构造函数等 ...

    public function authenticate(Request $request): PassportInterface
    {
        $username = $request->request->get('_username'); // 获取用户名

        return new Passport(
            new UserBadge($username, function($userIdentifier) {
                // 这里使用 username 查找用户
                $user = $this->userRepository->findOneBy(['username' => $userIdentifier]);

                if (!$user) {
                    throw new UserNotFoundException();
                }
                return $user;
            }),
            new PasswordCredentials($request->request->get('_password')),
            [
                new CsrfTokenBadge('authenticate', $request->request->get('_csrf_token')),
                new RememberMeBadge(),
            ]
        );
    }

    // ... 其他方法 ...
}