Symfony 6：继承FormLoginAuthenticator实现多用户类型登录

完全可以通过继承Symfony的登录认证器类（如AbstractLoginFormAuthenticator）自定义逻辑，实现基于userType字段区分不同数据表用户的登录需求。以下是具体实现步骤和关键代码：

核心思路 #

登录时通过表单提交的userType字段，动态选择对应的用户实体仓库查询用户，完成身份验证。同时兼容同一用户兼具多重身份的场景（登录时选择其中一种身份，后续可通过用户实体关联获取其他身份信息）。

1. 自定义多类型登录认证器 #

创建继承自AbstractLoginFormAuthenticator的认证器类，重写核心方法实现动态用户查询：

<?php

namespace App\Security;

use App\Entity\Admin;
use App\Entity\Teacher;
use App\Entity\Parent;
use App\Entity\Student;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;
use Symfony\Component\Security\Guard\AbstractLoginFormAuthenticator;
use Symfony\Component\Security\Core\Exception\BadCredentialsException;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;

class MultiTypeLoginAuthenticator extends AbstractLoginFormAuthenticator
{
    private $entityManager;
    private $passwordEncoder;
    private $urlGenerator;

    public function __construct(
        EntityManagerInterface $entityManager,
        UserPasswordEncoderInterface $passwordEncoder,
        UrlGeneratorInterface $urlGenerator
    ) {
        $this->entityManager = $entityManager;
        $this->passwordEncoder = $passwordEncoder;
        $this->urlGenerator = $urlGenerator;
    }

    // 获取表单提交的凭据（用户名、密码、用户类型）
    public function getCredentials(Request $request)
    {
        $credentials = [
            'username' => $request->request->get('login_form')['username'],
            'password' => $request->request->get('login_form')['password'],
            'userType' => $request->request->get('login_form')['userType'],
        ];

        $request->getSession()->set('login_credentials', $credentials);
        return $credentials;
    }

    // 根据用户类型查询对应数据表的用户
    public function getUser($credentials, UserProviderInterface $userProvider)
    {
        $userType = $credentials['userType'];
        $username = $credentials['username'];

        $user = match ($userType) {
            'admin' => $this->entityManager->getRepository(Admin::class)->findOneBy(['username' => $username]),
            'teacher' => $this->entityManager->getRepository(Teacher::class)->findOneBy(['username' => $username]),
            'parent' => $this->entityManager->getRepository(Parent::class)->findOneBy(['username' => $username]),
            'student' => $this->entityManager->getRepository(Student::class)->findOneBy(['username' => $username]),
            default => throw new BadCredentialsException('无效的用户类型'),
        };

        if (!$user) {
            throw new BadCredentialsException('用户名或密码错误');
        }

        return $user;
    }

    // 验证密码有效性
    public function checkCredentials($credentials, UserInterface $user)
    {
        return $this->passwordEncoder->isPasswordValid($user, $credentials['password']);
    }

    // 指定登录页面路由
    protected function getLoginUrl()
    {
        return $this->urlGenerator->generate('app_login');
    }
}

2. 创建包含用户类型选择的登录表单 #

新增登录表单类型，添加userType下拉选择框：

<?php

namespace App\Form;

use Symfony\Component\Form\AbstractType;
use Symfony\Component\Form\Extension\Core\Type\ChoiceType;
use Symfony\Component\Form\Extension\Core\Type\PasswordType;
use Symfony\Component\Form\Extension\Core\Type\TextType;
use Symfony\Component\Form\FormBuilderInterface;

class LoginFormType extends AbstractType
{
    public function buildForm(FormBuilderInterface $builder, array $options)
    {
        $builder
            ->add('username', TextType::class, [
                'label' => '用户名',
                'attr' => ['placeholder' => '请输入用户名']
            ])
            ->add('password', PasswordType::class, [
                'label' => '密码',
                'attr' => ['placeholder' => '请输入密码']
            ])
            ->add('userType', ChoiceType::class, [
                'label' => '用户类型',
                'choices' => [
                    '管理员' => 'admin',
                    '教师' => 'teacher',
                    '家长' => 'parent',
                    '学生' => 'student',
                ],
                'required' => true,
                'attr' => ['class' => 'form-select']
            ]);
    }
}

3. 配置Security和路由 #

在config/packages/security.yaml中配置自定义认证器：

security:
    enable_authenticator_manager: true
    password_hashers:
        # 确保所有用户实体使用统一的密码加密方式
        App\Entity\Admin: 'auto'
        App\Entity\Teacher: 'auto'
        App\Entity\Parent: 'auto'
        App\Entity\Student: 'auto'

    firewalls:
        main:
            lazy: true
            custom_authenticators:
                - App\Security\MultiTypeLoginAuthenticator
            logout:
                path: app_logout
                target: app_login

登录路由示例（config/routes.yaml）：

app_login:
    path: /login
    controller: App\Controller\SecurityController::login

app_logout:
    path: /logout

关键注意事项 #

• 用户实体规范：所有用户实体（Admin、Teacher等）必须实现Symfony\Component\Security\Core\User\UserInterface接口，确保包含getUsername()、getPassword()等必要方法。
• 多重身份处理：若用户兼具多种身份，可在用户实体中添加关联字段（如Teacher实体关联Parent实体），登录后通过当前用户对象获取其他身份数据。
• 密码一致性：所有用户实体的密码需使用相同的加密方式存储，避免验证失败。
• 异常处理：可根据需求自定义认证失败的异常信息，提升用户体验。

内容的提问来源于stack exchange，提问作者beta-developper