From 883b58211499fce2805121badb2d32ff7b971a6f Mon Sep 17 00:00:00 2001 From: Christian Scheb Date: Mon, 18 Mar 2019 22:11:11 +0100 Subject: [PATCH] Document access_control setting for the logout route --- Resources/doc/installation.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Resources/doc/installation.md b/Resources/doc/installation.md index ec95f494..a91203df 100644 --- a/Resources/doc/installation.md +++ b/Resources/doc/installation.md @@ -57,8 +57,11 @@ security: auth_form_path: 2fa_login # The route name you have used in the routes.yaml check_path: 2fa_login_check # The route name you have used in the routes.yaml - # This ensures that the form can only be accessed when two-factor authentication is in progress + # The path patterns shown here have to be updated according to your routes, if you're going with something custom access_control: + # This makes the logout route available during two-factor authentication, allows the user to cancel + - { path: ^/logout, role: IS_AUTHENTICATED_ANONYMOUSLY } + # This ensures that the form can only be accessed when two-factor authentication is in progress - { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS } ```