Skip to content

[Security] Impossible to configure the storage service for login_throttling #60744

New issue
New issue
Closed
#61046
Closed
[Security] Impossible to configure the storage service for login_throttling#60744
#61046
Labels
FeatureSecurityStatus: Needs Review
@Nek-

Description

@Nek-
Nek-
opened on Jun 9, 2025

Symfony version(s) affected

7.3

Description

The configuration of login_throttling do not allow to configure storage_service:

symfony/src/Symfony/Bundle/SecurityBundle/DependencyInjection/Security/Factory/LoginThrottlingFactory.php

Lines 66 to 71 in cd87bde

$limiterOptions = [
'policy' => 'fixed_window',
'limit' => $config['max_attempts'],
'interval' => $config['interval'],
'lock_factory' => $config['lock_factory'],
];

Besides it's supposed to be supported:

symfony/src/Symfony/Bundle/SecurityBundle/DependencyInjection/Security/Factory/LoginThrottlingFactory.php

Line 108 in cd87bde

if (null === $storageId = $limiterConfig['storage_service'] ?? null) {

How to reproduce

Configure a login_throttling: it's impossible to specify the storage service

Possible Solution

No response

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    FeatureSecurityStatus: Needs Review

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions