Symfony 2 user authorization

Question

symfony

I am using HWIOAuthBundle. When authorizing through VK, the user receives the ROLE_USER role, but in the profile he appears as not authenticated.

This is a big security hole and how can it be fixed?

Answer 1

Most likely, the problem is in the serialize and unserialize methods in the user entity. You can’t say more precisely here, because the code is not visible.