diff --git a/config/packages/security.yaml b/config/packages/security.yaml index 6a613e0..a5f1925 100644 --- a/config/packages/security.yaml +++ b/config/packages/security.yaml @@ -21,6 +21,7 @@ security: login_path: app_login check_path: app_login enable_csrf: true + default_target_path: all post logout: path: app_logout target: /login diff --git a/src/Controller/PostController.php b/src/Controller/PostController.php index 7548d15..50f58ab 100644 --- a/src/Controller/PostController.php +++ b/src/Controller/PostController.php @@ -21,7 +21,7 @@ class PostController extends AbstractController } # DEBUG: Ne doit pas être laissé en production. - #[Route('/post/all', name: 'all post', methods: ['GET'])] + #[Route('/', name: 'all post', methods: ['GET'])] public function getAllPost(): Response { $posts = $this->em->getRepository(Post::class)->findAll(); @@ -52,6 +52,8 @@ class PostController extends AbstractController #[Route('/post/new/', name: 'add_post', methods: ['GET', 'POST'])] public function addPost(Request $request): Response { + $this->denyAccessUnlessGranted('IS_AUTHENTICATED'); + $post = new Post(); $form = $this->createForm(PostType::class, $post); @@ -65,8 +67,7 @@ class PostController extends AbstractController $this->em->persist($post); $this->em->flush(); - - return new Response($user->getUserIdentifier()); + return $this->redirectToRoute('display post', ['id' => $post->getId()]); } return $this->render('post/new.html.twig', [ diff --git a/templates/post/all.html.twig b/templates/post/all.html.twig index 13180f2..1aa738b 100644 --- a/templates/post/all.html.twig +++ b/templates/post/all.html.twig @@ -1,5 +1,5 @@