The state of Symfony2 - SymfonyDay 2010

The State of Symfony2
Fabien Potencier

How many of you have already
played with Symfony2?

http://www.ﬂickr.com/photos/bartworldv6/4206815555

Symfony2 is not ready for production

http://www.ﬂickr.com/photos/rknickme/2205111920

Current guestimate for stable release
March 2011
http://www.ﬂickr.com/photos/pictureperfectpose/76138988

Crazy people
do use Symfony2

http://www.ﬂickr.com/photos/funky64/4267353106/

http://www.ﬂickr.com/photos/lululemonathletica/4229883622

http://www.ﬂickr.com/photos/cayusa/1209794692

http://www.ﬂickr.com/photos/y-a-n/29789408

Symfony2 Translation Component
http://www.ﬂickr.com/photos/migrainechick/3704150226

http://www.ﬂickr.com/photos/muﬀytyrone/4096351705

symfony vs Symfony2

http://www.ﬂickr.com/photos/thebusybrain/2492945625

Messages

Domains

Locales

http://www.ﬂickr.com/photos/rinux/631345826

$t->trans('Symfony2 is great!')

$t->trans('Hello {{ name }}!',
array('{{ name }}' => 'Symfony2'))

$t->trans('Symfony2 is great!', array(), 'app')

Pluralization vs Choice

http://www.ﬂickr.com/photos/orinrobertjohn/114430223

$t->transChoice($string, $count, $vars)

one: One apple|some: {{ count }} apples

{1} One apple|[0,Inf] {{ count }} apples

{0} No apples|
{1} One apple|
]1,Inf] {{ count }} apples

[-Inf,0[ WTF?!|
{0} No apples|
{1} One apple|
[2,19] Some apples|
[20,Inf] Many apples

{0} No apples|
One apple|
{{ count }} apples

<app:translator fallback="en" />

fr_FR
fr
en

PHP vs Twig

http://www.ﬂickr.com/photos/danielmarenco/4775410299

« All templating engines are equal
in the eyes of Symfony2 »

$this->render('BlogBundle:Post:index.php', array());

PHP renderer

$this->render('BlogBundle:Post:index.twig', array());

Twig renderer

$this->render('BlogBundle:Post:index.twig', array());

Template logical name

« Template engines are all equals,
but some are more equals than others »

<?php echo $view['translator']
->trans('Symfony2 is great!') ?>

vs

{% trans "Symfony2 is great!" %}

->trans('Symfony2 is {{ what }}!',
array('{{ what }}' => 'great'), 'app') ?>

vs

{% trans from app %}
Symfony2 is {{ what }}!
{% endtrans %}

->transChoice(
'No apples|One apple|{{ count }} apples',
1,
array('{{ count }}' => 1), 'app') ?>

vs

{% transchoice 1 from app %}
No apples|One apple|{{ count }} apples
{% endtranschoice %}

->transChoice(
'No apples|One apple|{{ count }} apples',
1,
array('{{ count }}' => 1), 'app') ?>

{% transchoice 1 from app %}
No apples|One apple|{{ count }} apples
{% endtranschoice %}

<?php echo $view['session']->getFlash('notice') ?>

vs

{% flash "notice" %}

<?php $view['slots']->start('title') ?>
Post: <?php echo $post->getTitle() ?>
<?php $view['slots']->stop() ?>

vs

{% block title %}
Post: {{ post.title }}
{% endblock title %}

Customizing
Forms
http://www.ﬂickr.com/photos/blackbutterﬂy/2304084815

{{ form|render_enctype }}
{{ form|render_errors }}
{{ form|render_hidden }}

{{ form.name|render_widget }}
{{ form.name|render_label }}
{{ form.name|render_errors }}
{{ form.name|render_data }}

An InputField instance

is rendered by

an input_field template block

{% block input_field %}
{% tag "input" with attributes %}
{% endblock %}

{% block textarea_field %}
{% contenttag "textarea" with attributes %}
{{ field.displayedData }}
{% endcontenttag %}
{% endblock %}

How can I customize the rendering of
the widget?

<span class="input_field">
</span>
{% endblock %}

{% extends 'TwigBundle::widgets.twig' %}

{% parent %}
</span>
{% endblock %}

all input widgets for a given form?

{% form_theme form "BlogBundle::widgets.twig" %}

all input widgets for all forms?

<twig:config>
<twig:form>
<twig:resource>
BlogBundle::widgets.twig
</twig:resource>
</twig:form>
</twig:config>

Nice inheritance/fallback templating system

Same questions as before but now for several widgets

{% parent %}
</span>
{% endblock %}

<span class="textarea_field">
{% parent %}
</span>
{% endblock %}

...

{% endblock input_field %}

{% contenttag "textarea" with attributes %}{{ field.displayedData }}{% endcontenttag %}
{% endblock textarea_field %}

{% block choice_field %}
{% if field.options.expanded %}
{% for child in field %}{{ child|render_widget }}{% endfor %}
{% else %}
{% contenttag "select" with attributes %}{{ field|render_choices }}{% endcontenttag %}
{% endif %}
{% endblock choice_field %}

{% block toggle_field %}
{% display input_field %}
{% if field.options.label %}{% contenttag "label" with ['for': field.id] %}{% trans field.options.label %}{% endcontenttag %}{% endif %}
{% endblock toggle_field %}

{% block date_time_field %}
{{ field.date|render_widget }}{{ field.time|render_widget }}
{% endblock date_time_field %}

{% block date_field %}
{% if field.field %}
{% else %}
{{ field.pattern|replace(['{{ year }}': field.year|render_widget, '{{ month }}': field.month|render_widget, '{{ day }}': field.day|
render_widget,]) }}
{% endif %}
{% endblock date_field %}

{% block time_field %}
{% if field.isfield %}
{% else %}
{{ field.hour|render_widget }}:{{ field.minute|render_widget }}
{% if field.options.with_seconds %}:{{ field.second|render_widget }}{% endif %}
{% endif %}
{% endblock time_field %}

{% block money_field %}
{% set widget %}{% display input_field %}{% endset %}{{ field.pattern|replace(['{{ widget }}': widget]) }}
{% endblock money_field %}

{% block percent_field %}
{% display input_field %} %
{% endblock percent_field %}

Symfony2 Security

http://www.ﬂickr.com/photos/powerbooktrance/466709245

XSS
CSRF
SQL Injection

http://www.ﬂickr.com/photos/mastrobiggo/2322337810

Authentication
Authorization

http://www.ﬂickr.com/photos/stevendepolo

symfony Core sf*GuardPlugin Your Code

$this->getUser()->getGuardUser()->getProfile()

OO Composition

$this->getUser()->getGuardUser()->getProfile()

sfBasicSecurityUser sfGuardUser Your object
tied to the session tied to an ORM tied to an ORM
comes from sf*GuardPlugin

What if I don’t want to use an ORM?

Symfony2 Core Your Code

$this['security.context']->getUser()

$this['security.context']->getUser()

Your POPO
Implements AccountInterface

How does Symfony2 know about your Users?

AccountInterface

UserProviderInterface

namespace BundleAccountBundleModel;

use SymfonyComponentSecurityUserAccountInterface;

class User implements AccountInterface
{
// ...
}

namespace BundleAccountBundleEntity;


/**
* @Entity
*/
{
// ...
}

namespace BundleAccountBundleEntityRepository;

use DoctrineORMEntityRepository;
use SymfonyComponentSecurityUserUserProviderInterface;

class UserRepository extends EntityRepository implements
UserProviderInterface
{
public function loadUserByUsername($username)
{
return $this->findOneBy(array('user' => $username));
}
}

What if I want to use the email for the username?

namespace BundleBlogBundleEntity;


/**
* @Entity
*/
{
public function getUsername()
{
return $this->email;
}

// ...
}

But, I just have one administrator

or… How can I secure my personal website backend?

namespace BundleBlogBundleEntity;


/**
* @Entity
*/
{
public function getSalt()
{
return $this->id;
}

// ...
}

Also useful for testing and prototyping

What if I want to use LDAP, in-memory, and a DB for my users?

Request

core.request

getController()

core.controller
core.exception

getArguments()

core.view

core.response

Response

Symfony2 Firewall

http://www.ﬂickr.com/photos/mederic/68456509

Request

core.request

core.security HttpKernelSecurityFirewall

getController()

core.controller

getArguments()

core.view

core.response

Response

Authentication
http://www.ﬂickr.com/photos/ul_marga/755378645

What if I want stateless authentication?

What if I want diﬀerent authentication strategies in one app?

One Application per Symfony2 Project

http://www.ﬂickr.com/photos/cdell/548548453

What if I want to support
diﬀerent authentication strategies
in one section of an app?

Using LDAP/certiﬁcate/OpenID authentication is really easy

Authorization

http://www.ﬂickr.com/photos/theodevil/4911737917

/article/:id

<access>
<url role="ROLE_ADMIN">
<attribute key="id" pattern="21" />
</url>
</access>

<access>
<url path="/article/21" role="ROLE_ADMIN" />
</access>

Implementation based on Spring Security

First proof-of-concept available next week

Symfony2: The Web Operating System?

Kernel
Events
Proxy
Firewall
Bundles

http://www.ﬂickr.com/photos/declanjewell/2687934284

The state of Symfony2 - SymfonyDay 2010

The state of Symfony2 - SymfonyDay 2010

More Related Content

What's hot (20)

Similar to The state of Symfony2 - SymfonyDay 2010 (20)

More from Fabien Potencier (15)

Recently uploaded (20)

The state of Symfony2 - SymfonyDay 2010