Skip to content

Updates to security.rst #5389

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions book/security.rst
Original file line number Diff line number Diff line change
Expand Up @@ -128,9 +128,9 @@ A) Configuring how your Users will Authenticate
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The main job of a firewall is to configure *how* your users will authenticate.
Will they use a login form? Http Basic? An API token? All of the above?
Will they use a login form? HTTP basic authentication? An API token? All of the above?

Let's start with Http Basic (the old-school pop-up) and work up from there.
Let's start with HTTP basic authentication (the old-school prompt) and work up from there.
To activate this, add the ``http_basic`` key under your firewall:

.. configuration-block::
Expand Down Expand Up @@ -265,7 +265,7 @@ user to be logged in to access this URL:
You'll learn more about this ``ROLE_ADMIN`` thing and denying access
later in the :ref:`security-authorization` section.

Great! Now, if you go to ``/admin``, you'll see the HTTP Basic popup:
Great! Now, if you go to ``/admin``, you'll see the HTTP basic auth prompt:

.. image:: /images/book/security_http_basic_popup.png
:align: center
Expand Down Expand Up @@ -593,8 +593,8 @@ before inserting them into the database? Don't worry, see
D) Configuration Done!
~~~~~~~~~~~~~~~~~~~~~~

Congratulations! You now have a working authentication system that uses Http
Basic and loads users right from the ``security.yml`` file.
Congratulations! You now have a working authentication system that uses HTTP
basic auth and loads users right from the ``security.yml`` file.

Your next steps depend on your setup:

Expand Down