I had a case in one of my apps where I have some shared logic for user checkers across multiple firewalls (API and traditional web login) while also needing extra logic for the API. Instead of duplicating the checker for each firewall or using a decorator, I thought a chained user checker would be nice to have and that it might be useful to users of the framework.

This will add aChainUserChecker class to thesecurity-core component, and the SecurityBundle will create asecurity.user_checker.chain.<firewall> service for each firewall. User checkers can then be tagged with asecurity.user_checker.<firewall> tag for each firewall the checker applies to, and users would set this chain service as the user checker for their firewall.

<?phpnamespaceApp\Security\User;useSymfony\Component\DependencyInjection\Attribute\Autoconfigure;useSymfony\Component\Security\Core\User\UserCheckerInterface;#[Autoconfigure(tags: [['security.user_checker.main' => ['priority' =>10]]])]#[Autoconfigure(tags: [['security.user_checker.api' => ['priority' =>10]]])]finalclass DisabledAccountUserCheckerimplements UserCheckerInterface {}#[Autoconfigure(tags: [['security.user_checker.api' => ['priority' =>5]]])]finalclass ApiAccessAllowedUserCheckerimplements UserCheckerInterface {}