防火墙和授权

use Symfony\Component\Security\Core\Authorization\AuthorizationChecker;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;
 
// instance of Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface
// TokenStorageInterface实例
$tokenStorage = ...;
 
// instance of Symfony\Component\Security\Core\Authentication\AuthenticationManagerInterface
// AuthenticationManagerInterface实例
$authenticationManager = ...;
 
// instance of Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface
// AccessDecisionManagerInterface实例
$accessDecisionManager = ...;
 
$authorizationChecker = new AuthorizationChecker(
    $tokenStorage,
    $authenticationManager,
    $accessDecisionManager
);
 
// ... authenticate the user 验证用户
 
if (!$authorizationChecker->isGranted('ROLE_ADMIN')) {
    throw new AccessDeniedException();
}

use Symfony\Component\Security\Http\FirewallMap;
use Symfony\Component\HttpFoundation\RequestMatcher;
use Symfony\Component\Security\Http\Firewall\ExceptionListener;
 
$map = new FirewallMap();
 
$requestMatcher = new RequestMatcher('^/secured-area/');
 
// instances of Symfony\Component\Security\Http\Firewall\ListenerInterface
// ListenerInterface实例组成的数组
$listeners = array(...);
 
$exceptionListener = new ExceptionListener(...);
 
$map->add($requestMatcher, $listeners, $exceptionListener);

use Symfony\Component\Security\Http\Firewall;
use Symfony\Component\HttpKernel\KernelEvents;
 
// the EventDispatcher used by the HttpKernel
// 派遣器是给HttpKernel用的
$dispatcher = ...;
 
$firewall = new Firewall($map, $dispatcher);
 
$dispatcher->addListener(
    KernelEvents::REQUEST,
    array($firewall, 'onKernelRequest')
);