Symfony 4认证开发报错：无法实例化抽象类App\Security\FormLoginAuthenticator

Alright, let's break down this error and fix it step by step. The core issue here is straightforward: abstract classes can't be instantiated directly—they're meant to be blueprints for other classes to inherit from, not used as standalone objects.

Why You're Seeing This Error #

Looking at your code, you've marked FormLoginAuthenticator with the abstract keyword. When you try to use this class (either by manually creating an instance with new or having Symfony autowire it as a service), PHP throws this error because abstract classes aren't designed to be instantiated directly.

Solution 1: Remove the abstract Keyword (For a Standalone Authenticator) #

If this class is meant to be your actual login authenticator, just remove the abstract modifier. You'll also need to implement all the required abstract methods from AbstractFormLoginAuthenticator—these are mandatory for Symfony's Guard authentication system to work.

Here's the corrected, complete version of your class:

// src/Security/FormLoginAuthenticator.php
use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
use Symfony\Component\Security\Core\User\UserPasswordEncoderInterface;
use Symfony\Component\Routing\RouterInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\Security\Core\Security;

class FormLoginAuthenticator extends AbstractFormLoginAuthenticator {
    protected $router;
    protected $encoder;

    public function __construct(RouterInterface $router, UserPasswordEncoderInterface $encoder) {
        $this->router = $router;
        $this->encoder = $encoder; // Fixed your typo: "enconder" → "encoder"
    }

    // Required: Extract credentials from the login request
    public function getCredentials(Request $request) {
        return [
            'username' => $request->request->get('_username'),
            'password' => $request->request->get('_password'),
        ];
    }

    // Required: Load the user matching the provided credentials
    public function getUser($credentials, UserProviderInterface $userProvider) {
        return $userProvider->loadUserByIdentifier($credentials['username']);
    }

    // Required: Validate the password against the user's stored hash
    public function checkCredentials($credentials, UserInterface $user) {
        return $this->encoder->isPasswordValid($user, $credentials['password']);
    }

    // Required: Define the URL of your login page
    protected function getLoginUrl() {
        return $this->router->generate('app_login');
    }

    // Required: Handle successful authentication
    public function onAuthenticationSuccess(Request $request, $token, $providerKey) {
        // Redirect to your post-login page (e.g., dashboard)
        return new RedirectResponse($this->router->generate('app_dashboard'));
    }

    // Recommended: Handle failed authentication
    public function onAuthenticationFailure(Request $request, AuthenticationException $exception) {
        // Store the error in the session and redirect back to login
        $request->getSession()->set(Security::AUTHENTICATION_ERROR, $exception);
        return new RedirectResponse($this->getLoginUrl());
    }
}

Solution 2: Create a Concrete Subclass (For Reusable Base Logic) #

If you intended FormLoginAuthenticator to be a shared base class for multiple authenticators, keep it abstract. Then create a concrete subclass that implements all the missing abstract methods.

Step 1: Keep Your Abstract Base Class

// src/Security/FormLoginAuthenticator.php
use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
use Symfony\Component\Security\Core\User\UserPasswordEncoderInterface;
use Symfony\Component\Routing\RouterInterface;

abstract class FormLoginAuthenticator extends AbstractFormLoginAuthenticator {
    protected $router;
    protected $encoder;

    public function __construct(RouterInterface $router, UserPasswordEncoderInterface $encoder) {
        $this->router = $router;
        $this->encoder = $encoder;
    }

    // Implement shared logic here (e.g., default login URL)
    protected function getLoginUrl() {
        return $this->router->generate('app_login');
    }
}

Step 2: Create Your Actual Authenticator Subclass

// src/Security/LoginFormAuthenticator.php
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\Security\Core\Security;

class LoginFormAuthenticator extends FormLoginAuthenticator {
    public function getCredentials(Request $request) {
        return [
            'username' => $request->request->get('_username'),
            'password' => $request->request->get('_password'),
        ];
    }

    public function getUser($credentials, UserProviderInterface $userProvider) {
        return $userProvider->loadUserByIdentifier($credentials['username']);
    }

    public function checkCredentials($credentials, UserInterface $user) {
        return $this->encoder->isPasswordValid($user, $credentials['password']);
    }

    public function onAuthenticationSuccess(Request $request, $token, $providerKey) {
        return new RedirectResponse($this->router->generate('app_dashboard'));
    }

    public function onAuthenticationFailure(Request $request, AuthenticationException $exception) {
        $request->getSession()->set(Security::AUTHENTICATION_ERROR, $exception);
        return new RedirectResponse($this->getLoginUrl());
    }
}

Final Note

Make sure your Symfony security configuration references the concrete subclass (LoginFormAuthenticator) instead of the abstract base class.

内容的提问来源于stack exchange，提问作者ShanjayG